Trend Micro warns of an exploited Apex One zero-day.

Trend Micro warns of an exploited Apex One zero-day.
Trend Micro patched CVE-2026-34926, a directory-traversal flaw in Apex One on-premise servers, after observing at least one exploitation attempt in the wild. The bug requires the attacker to already have admin-level access to the server, but it can be used to inject malicious code that deploys to endpoint agents. CISA added the flaw to its Known Exploited Vulnerabilities catalog and ordered U.S. federal agencies to patch by June 4.