Trend Micro has issued a critical security advisory addressing three severe vulnerabilities in Apex Central (on-premise) that could enable remote code execution, denial-of-service attacks, and unauthorized system access.
Released on January 7, 2026, the vulnerabilities affect all versions below Build 7190 and pose an immediate threat to enterprise security infrastructure.
Critical Remote Code Execution Vulnerability
The most severe vulnerability, CVE-2025-69258, has a CVSS score of 9.8 and is a critical LoadLibraryEx flaw.
This vulnerability allows unauthenticated remote attackers to load attacker-controlled dynamic link libraries (DLL) into critical executables, resulting in arbitrary code execution with SYSTEM-level privileges.
The attack requires no authentication or user interaction, making it particularly dangerous for exposed deployments.
Two additional vulnerabilities enable denial-of-service attacks without requiring authentication. CVE-2025-69259 involves unchecked NULL return values in message handling, while CVE-2025-69260 exploits out-of-bounds read conditions.
Both vulnerabilities carry a CVSS score of 7.5, enabling remote attackers to crash affected systems and disrupt business operations.
Trend Micro has released Critical Patch Build 7190, available immediately through their Download Center.
Organizations must prioritize updating all Apex Central installations, as these vulnerabilities pose a significant risk of exploitation in production environments.
The vendor strongly recommends immediate deployment due to the critical nature of the RCE vulnerability and the lack of authentication requirements.
| CVE Identifier | Vulnerability Type | CVSS Score | Impact |
|---|---|---|---|
| CVE-2025-69258 | LoadLibraryEX Remote Code Execution | 9.8 (CRITICAL) | Unauthenticated RCE as SYSTEM user |
| CVE-2025-69259 | Message NULL Return Denial-of-Service | 7.5 (HIGH) | Service disruption without authentication |
| CVE-2025-69260 | Out-of-bounds Read Denial-of-Service | 7.5 (HIGH) | Service disruption without authentication |
Beyond applying Critical Patch Build 7190, Trend Micro advises enterprises to review remote access policies for critical systems and ensure perimeter security configurations are up to date.
While exploiting these vulnerabilities may require specific conditions, the lack of authentication for two of them and the critical nature of the RCE flaw warrant immediate remediation across all affected deployments.
Follow us on Google News , LinkedIn and X to Get More Instant Updates. Set Cyber Press as a Preferred Source in Google.
