{"vulnerability": "cve-2026-3492", "sightings": [{"uuid": "3b924ab2-51d3-4e24-850d-029c93936381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-34928", "type": "seen", "source": "https://jvn.jp/en/vu/JVNVU90583059", "content": "", "creation_timestamp": "2026-05-20T22:00:00.000000Z"}, {"uuid": "34a90cc1-e4d2-407a-b79a-6e4f7618eee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-34929", "type": "seen", "source": "https://jvn.jp/en/vu/JVNVU90583059", "content": "", "creation_timestamp": "2026-05-20T22:00:00.000000Z"}, {"uuid": "40e1a10e-9214-4356-845d-68a5471c800d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://jvn.jp/en/vu/JVNVU90583059", "content": "", "creation_timestamp": "2026-05-20T22:00:00.000000Z"}, {"uuid": "e2b435e1-2547-4399-afe1-d9f228e46c1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-34927", "type": "seen", "source": "https://jvn.jp/en/vu/JVNVU90583059", "content": "", "creation_timestamp": "2026-05-20T22:00:00.000000Z"}, {"uuid": "4431ee03-117a-41ad-a439-a152d7ca3bb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://www.jpcert.or.jp/english/at/2026/at260014.html", "content": "", "creation_timestamp": "2026-05-20T23:23:00.000000Z"}, {"uuid": "1290f279-62c2-4def-ade6-470c64b9fd39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmes3dlive2q", "content": "CVE-2026-34926 - \"Apex One Directory Traversal Vulnerability\"\nCVE ID : CVE-2026-34926\n \n Published : May 21, 2026, 1:03 p.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local ...", "creation_timestamp": "2026-05-21T16:00:25.350252Z"}, {"uuid": "2892b2f6-5ddb-486f-9944-bbdede6ae2e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34927", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmeskbpmc62h", "content": "CVE-2026-34927 - Trend Micro Apex One/SEP Privilege Escalation Vulnerability\nCVE ID : CVE-2026-34927\n \n Published : May 21, 2026, 1:03 p.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to es...", "creation_timestamp": "2026-05-21T16:08:46.658034Z"}, {"uuid": "082ac816-87ac-416f-a02f-d745ec734b9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34928", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmesor5egm2t", "content": "CVE-2026-34928 - Trend Micro Apex One/SEP Privilege Escalation Vulnerability\nCVE ID : CVE-2026-34928\n \n Published : May 21, 2026, 1:03 p.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to es...", "creation_timestamp": "2026-05-21T16:11:16.855918Z"}, {"uuid": "61b0a506-8025-4695-a51c-b2b11e75eadf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34929", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmeu7cozbq2k", "content": "CVE-2026-34929 - Trend Micro Apex One/SEP Privilege Escalation Vulnerability\nCVE ID : CVE-2026-34929\n \n Published : May 21, 2026, 1:03 p.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to es...", "creation_timestamp": "2026-05-21T16:38:26.124166Z"}, {"uuid": "8e60ef23-06b0-48a8-9d31-1a376467924c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/116614095800515709", "content": "EITW ../ in Trend Micro Apex One. :brdAlert: \nhttps://success.trendmicro.com/en-US/solution/KA-0023430\nCVE-2026-34926\n\nTrendAI has released updates to Apex One (on-premise), Apex One as a Service and Vision One - Standard Endpoint Protection (SEP) to resolve multiple vulnerabilities.", "creation_timestamp": "2026-05-21T18:58:11.475715Z"}, {"uuid": "56b81dc9-7f72-4530-856f-cdb378e248f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6547501", "content": "2026-05-21: [CVE-2026-34926] Trend Micro Apex One (On-Premise) Directory Traversal VulnerabilityTrend Micro Apex One (on-premise) contains a directory traversal vulnerability that could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations.\ncisakev", "creation_timestamp": "2026-05-21T19:22:21.131742Z"}, {"uuid": "22c777e0-6383-401f-b589-eeb0b9beafee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mmf5swfn6t2s", "content": "\ud83d\uded1 CVE-2026-34926\nTrend Micro Apex One\nCVSS 6.7 / KEV\nTL;DR: A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-aut\u2026\nhttps://cvesentinel.replit.app/report/CVE-2026-34926?utm_source=bluesky&amp;utm_medium=social&amp;utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-05-21T19:30:27.650947Z"}, {"uuid": "697d94d4-5406-473c-b8e9-dec562fe1712", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/trend-micro-security-advisory-av26-494", "content": "", "creation_timestamp": "2026-05-21T12:40:00.000000Z"}, {"uuid": "52160d62-0932-42d5-815b-67a385448bbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/trend-micro-apex-one-multiple-vulnerabilities_20260522", "content": "", "creation_timestamp": "2026-05-21T18:00:00.000000Z"}, {"uuid": "89f6e560-654c-4c55-8909-d9d812312e84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-34927", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/trend-micro-apex-one-multiple-vulnerabilities_20260522", "content": "", "creation_timestamp": "2026-05-21T18:00:00.000000Z"}, {"uuid": "bf33dc56-b188-4207-96d3-55448ceaf238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-34928", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/trend-micro-apex-one-multiple-vulnerabilities_20260522", "content": "", "creation_timestamp": "2026-05-21T18:00:00.000000Z"}, {"uuid": "8200ef4a-f55e-4c15-8d83-3a1a0bbdbc1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-34929", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/trend-micro-apex-one-multiple-vulnerabilities_20260522", "content": "", "creation_timestamp": "2026-05-21T18:00:00.000000Z"}, {"uuid": "4554b6bb-6a34-4827-b325-0fe5e4045c89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mmgjhx5diq2x", "content": "CVE-2026-34926 is a patched Apex One directory traversal flaw exploited in the wild, requiring admin access and affecting on-premises deployments.\n", "creation_timestamp": "2026-05-22T08:31:45.205965Z"}, {"uuid": "eb97b32b-a6f2-4abe-81d1-deecd2556a75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-trend-micro-1", "content": "", "creation_timestamp": "2026-05-22T01:47:16.000000Z"}, {"uuid": "db8c1d28-9110-474d-98d6-ebd6ee892292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1885", "content": "", "creation_timestamp": "2026-05-21T21:00:00.000000Z"}, {"uuid": "d292b3e2-8d60-4524-b075-30197af44bcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mmgrrsucba2s", "content": "TrendAI patched CVE-2026-34926, a zero-day exploited in the wild in on-premises Apex One. The flaw could let admins modify a key table and inject malicious code. Added to CISA&#039;s KEV. #ApexOne #CISA #KEV", "creation_timestamp": "2026-05-22T11:00:30.722853Z"}, {"uuid": "edfcaafa-7932-499c-b997-c4f93cfe5bfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34929", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116618460652981686", "content": "We have just added an important vulnerability affecting Trend Micro TrendAI Apex One and TrendAI Apex One as a Service (CVE-2026-34929) https://vuldb.com/vuln/365025", "creation_timestamp": "2026-05-22T13:28:12.395713Z"}, {"uuid": "9a7b4869-55a1-4e49-a841-3e955b846b96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116618814532131696", "content": "CVE-2026-34926.\nSecurity Week: TrendAI Patches Apex One Zero-Day Exploited in the Wild https://www.securityweek.com/trendai-patches-apex-one-zero-day-exploited-in-the-wild/ @SecurityWeek #infosec #vulnerability", "creation_timestamp": "2026-05-22T14:58:38.452608Z"}, {"uuid": "3963b58a-bfe8-4875-bc30-0e923c048f85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://bsky.app/profile/kubonai.bsky.social/post/3mmhbv4rldr2q", "content": "CVE-2025-34291 &amp; CVE-2026-34926: Critical Langflow RCE and Trend Micro Apex O...\n\nCISA adds two critical vulnerabilities to KEV catalog: CVE-2025-34291 (Langflow CORS misconfiguration enabling accou...\n\n\ud83d\udd17 https://ipsec.live/blog/2026-05-22-langflow-apex-one-cisa-kev\n\n#infosec #cybersecurity", "creation_timestamp": "2026-05-22T15:48:36.061337Z"}, {"uuid": "3d05b425-dd20-4fd8-a2ca-a75f931bae24", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/29739c2a-9ff9-4e9f-924c-b92c406a67b7", "content": "", "creation_timestamp": "2026-05-22T17:00:02.525575Z"}, {"uuid": "feff7d51-199d-4258-9f12-e1b67c149035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mmhfvmrxhu22", "content": "Trend Micro patched CVE-2026-34926, an Apex One zero-day exploited in the wild. The flaw in on-premises Windows deployments can enable code injection with admin access. CISA added it to the KEV list. #TrendMicro #ApexOne #CISA", "creation_timestamp": "2026-05-22T17:00:30.909410Z"}, {"uuid": "96252e44-f9cf-4043-b9dd-1b4b0c74e9ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mmhgmxj5432c", "content": "Heads up! Trend Micro's Apex One has a zero-day (CVE-2026-34926) under active exploitation, now in CISA's KEV catalog. This isn't just another flaw; attackers are turning EDR into a payload delivery system. Find out why immediate\u2026\n\nhttps://www.tpp.blog/2d2d32i\n\n#cybersecurity #trendmicro #apexone", "creation_timestamp": "2026-05-22T17:13:31.318580Z"}, {"uuid": "1cb38a2e-7d63-4efa-affc-811c33a9b06e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116619809226441932", "content": "\ud83d\udcf0 CISA KEV Catalog Updated: Actively Exploited Langflow and Trend Micro Flaws Demand Urgent Patching\n\ud83d\udce2 CISA KEV UPDATE: Two new vulnerabilities affecting Langflow (CVE-2025-34291) &amp; Trend Micro Apex One (CVE-2026-34926) are being actively exploited. Federal agencies mandated to patch. All orgs urged to patch NOW! #CyberSecurity #Vulnerability #Patc...\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-adds-langflow-and-trend-micro-bugs-to-kev-catal\u2026", "creation_timestamp": "2026-05-22T19:11:13.935329Z"}, {"uuid": "896f6ada-bc4d-4ed0-a6e9-34f505a68378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mmhnazrwsk2x", "content": "\ud83d\udce2 CISA KEV UPDATE: Two new vulnerabilities affecting Langflow (CVE-2025-34291) &amp; Trend Micro Apex One (CVE-2026-34926) are being actively exploited. Federal agencies mandated to patch. All orgs urged to patch NOW! #CyberSecurity #Vulnerability #Patc...\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-05-22T19:12:07.946631Z"}, {"uuid": "2ab3a87c-8ac6-4552-b5ea-847286f53980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "exploited", "source": "https://t.me/information_security_channel/55290", "content": "TrendAI Patches Apex One Zero-Day Exploited in the Wild\nhttps://www.securityweek.com/trendai-patches-apex-one-zero-day-exploited-in-the-wild/\n\nCVE-2026-34926 is a directory traversal flaw that can be exploited against the on-premise version of Apex One.\nThe post TrendAI Patches Apex One Zero-Day Exploited in the Wild (https://www.securityweek.com/trendai-patches-apex-one-zero-day-exploited-in-the-wild/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-05-22T09:29:37.000000Z"}, {"uuid": "8f7c3033-3018-4e16-965a-c7031d3d9100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://bsky.app/profile/cyberlensai.bsky.social/post/3mmnmpi6cem2n", "content": "CVE watch: CVE-2026-34926: Trend Micro Apex One \u2014 Trend Micro Apex One\u2026\n\nCheck exposure, dependency, and agent/tool access before panic-patching. Inventory beats vibes.\n\nSource: cisa.gov\nhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34926", "creation_timestamp": "2026-05-25T04:18:16.391640Z"}, {"uuid": "02a18702-2781-4f2e-9aaa-3b4ea1ad8320", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "Telegram/QQT-Q6OUMbbPAX_T-HqeuIDXp1trXX8UiN3jKLc_4d4AIZQ", "content": "", "creation_timestamp": "2026-05-22T15:00:07.000000Z"}, {"uuid": "4c74bf2c-87a6-4f4a-887e-07b6d5badf49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://t.me/true_secator/8237", "content": "\u042f\u043f\u043e\u043d\u0441\u043a\u0430\u044f Trend Micro \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0438 0-day Apex One (\u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0430\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430) \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Windows.\n\nApex One - \u044d\u0442\u043e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u043e\u0442 Trend Micro \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a \u043e\u0442 \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0441\u043f\u0435\u043a\u0442\u0440\u0430 \u0443\u0433\u0440\u043e\u0437 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438, \u0430\u0442\u0430\u043a\u0438 \u0431\u0435\u0437 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0432\u0435\u0431-\u0443\u0433\u0440\u043e\u0437\u044b.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0438\u0441\u044f \u043a\u0430\u043a\u00a0CVE-2026-34926 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0442\u0430\u0431\u043b\u0438\u0446\u0443 \u043a\u043b\u044e\u0447\u0435\u0439 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0442\u0435\u043c \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442 \u043d\u0430 \u0430\u0433\u0435\u043d\u0442\u0430\u0445 \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430\u0445.\n\n\u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Apex One, \u0438 \u0434\u043b\u044f \u0435\u0451 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0434\u043e\u043b\u0436\u0435\u043d \u0438\u043c\u0435\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0438 \u0443\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u043a\u0430\u043a\u0438\u043c-\u043b\u0438\u0431\u043e \u0434\u0440\u0443\u0433\u0438\u043c \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c.\n\n\u041e\u0434\u043d\u0430\u043a\u043e, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0436\u0435\u0441\u0442\u043a\u0438\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430, \u0447\u0442\u043e TrendAI \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u043e\u0434\u043d\u0443 \u043f\u043e\u043f\u044b\u0442\u043a\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0412\u0447\u0435\u0440\u0430 CISA \u0442\u0430\u043a\u0436\u0435\u00a0\u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 CVE-2026-34926\u00a0\u0432 \u0441\u0432\u043e\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0442\u043c\u0435\u0442\u0438\u0432, \u0447\u0442\u043e \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0447\u0430\u0441\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0432\u0435\u043a\u0442\u043e\u0440\u043e\u0432 \u0430\u0442\u0430\u043a \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0440\u0438\u0441\u043a\u0438.\n\n\u0412 \u0447\u0435\u0442\u0432\u0435\u0440\u0433 Trend Micro \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0430\u0433\u0435\u043d\u0442\u0435 Apex One Standard Endpoint Protection (SEP), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u043d\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0447\u0430\u0441\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Trend Micro Apex One, \u0438 \u0437\u0430\u0447\u0430\u0441\u0442\u0443\u044e \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 0-day \u0430\u0442\u0430\u043a.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438,\u00a0\u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2025 \u0433\u043e\u0434\u0430\u00a0Trend Micro \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0430 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 RCE \u0432 Apex One (CVE-2025-54948) \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0434\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u043d\u0443\u043b\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0445\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432\u00a0\u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430\u00a0(CVE-2022-40139) \u0438\u00a0\u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2023 \u0433\u043e\u0434\u0430\u00a0(CVE-2023-41179).\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f CISA \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 12 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Trend Micro Apex, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043b\u0438\u0431\u043e \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c, \u043b\u0438\u0431\u043e \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.", "creation_timestamp": "2026-05-25T12:14:34.000000Z"}, {"uuid": "d60a22a8-bdf0-4a5c-995d-658539a77ea1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mmpbklfn5o2x", "content": "CISA has added two vulnerabilities to its KEV catalog: CVE-2025-34291 (CVSS 9.4) in Langflow, allowing arbitrary code execution and full system compromise, and CVE-2026-34926 (CVSS 6.7) in Trend Micro Apex One, enabling local attackers to inject malicious code.", "creation_timestamp": "2026-05-25T20:04:00.949527Z"}, {"uuid": "e49fe7a5-2d89-4aff-bbf3-8e71b6c2b0cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmr3hcdqub2a", "content": "\ud83d\udd17 CVE : CVE-2026-34926, CVE-2026-34927, CVE-2026-34928, CVE-2026-34929, CVE-2026-34930, CVE-2026-45206, CVE-2026-45207, CVE-2026-45208", "creation_timestamp": "2026-05-26T13:20:07.045340Z"}, {"uuid": "78d5d390-1c48-42f6-9122-930b4a091084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34927", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmr3hcdqub2a", "content": "\ud83d\udd17 CVE : CVE-2026-34926, CVE-2026-34927, CVE-2026-34928, CVE-2026-34929, CVE-2026-34930, CVE-2026-45206, CVE-2026-45207, CVE-2026-45208", "creation_timestamp": "2026-05-26T13:20:07.212302Z"}, {"uuid": "509bcc94-f0b6-47ad-b3f7-0b2e5cbd7b76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34928", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmr3hcdqub2a", "content": "\ud83d\udd17 CVE : CVE-2026-34926, CVE-2026-34927, CVE-2026-34928, CVE-2026-34929, CVE-2026-34930, CVE-2026-45206, CVE-2026-45207, CVE-2026-45208", "creation_timestamp": "2026-05-26T13:20:07.380899Z"}, {"uuid": "d3ba1344-bc7a-4900-965c-f75547eac65a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34929", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmr3hcdqub2a", "content": "\ud83d\udd17 CVE : CVE-2026-34926, CVE-2026-34927, CVE-2026-34928, CVE-2026-34929, CVE-2026-34930, CVE-2026-45206, CVE-2026-45207, CVE-2026-45208", "creation_timestamp": "2026-05-26T13:20:07.528275Z"}, {"uuid": "7b91fccb-1fe5-495d-b92a-f03dc1a9d36c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mmr5gnxdvk2x", "content": "Actively exploited Trend Micro Apex One flaw gets CISA warning (CVE-2026-34926)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/05/26/a...\n\n#cybersecurity #cybersecuritynews #0day #endpointsecurity", "creation_timestamp": "2026-05-26T13:55:37.019697Z"}, {"uuid": "133bb892-31eb-46f7-9890-fd8ff3ad5075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mmr5t3g3g4c2", "content": "Actively exploited Trend Micro Apex One flaw gets CISA warning (CVE-2026-34926) A relative directory path traversal vulnerability (CVE-2026-34926) in Trend Micro\u2019s Apex One platform has been expl...\n\n#Don't #miss #Hot #stuff #News #0-day #CISA #endpoint [\u2026] \n\n[Original post on helpnetsecurity.com]", "creation_timestamp": "2026-05-26T14:03:04.126110Z"}, {"uuid": "26987dce-dd45-42c7-80ba-3711b7b1e0d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mmr7d3j3br2c", "content": "\u7a4d\u6975\u7684\u306b\u60aa\u7528\u3055\u308c\u308bTrend Micro Apex One\u306e\u6b20\u9665\u3001CISA\u8b66\u544a\u3092\u53d7\u3051\u308b\uff08CVE-2026-34926\uff09\n\nTrend Micro\u306e\u76f8\u5bfe\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u8106\u5f31\u6027\uff08CVE-2026-34926\uff09\u304cApex One\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u3067\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u304c\u540c\u793e\u306b\u3088\u308a\u78ba\u8a8d\u3055\u308c\u307e\u3057\u305f\u3002 \u300cTrendAI\u306f\u3001\u3053\u306e\u8106\u5f31\u6027\u306e\u91ce\u751f\u3067\u306e\u60aa\u7528\u306e\u8a66\u307f\u3092\u5c11\u306a\u304f\u3068\u30821\u3064\u78ba\u8a8d\u3057\u307e\u3057\u305f\u300d\u3068Trend Micro\u306f\u8ff0", "creation_timestamp": "2026-05-26T14:29:21.517512Z"}, {"uuid": "06686d3c-b46f-4e49-8b38-6bdb56af08be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mmsbmoi4i724", "content": "Trend Micro Apex One\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3001CISA\u304b\u3089\u8b66\u544a\u304c\u767a\u4ee4\u3055\u308c\u307e\u3057\u305f\uff08CVE-2026-34926\uff09 \n\nActively exploited Trend Micro Apex One flaw gets CISA warning (CVE-2026-34926)  #HelpNetSecurity (May 26)\n\nwww.helpnetsecurity.com/2026/05/26/a...", "creation_timestamp": "2026-05-27T00:43:09.944040Z"}, {"uuid": "04269d98-d8cf-4b91-bf7b-ebe075485230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mmtyrvoo7s2g", "content": "Actively exploited Trend Micro Apex One flaw gets CISA warning (CVE-2026-34926)\n\nA relative directory path traversal vulnerability (CVE-2026-34926) in Trend Micro\u2019s Apex One platform has been exploited in zero-day attacks, the company confirmed. \u201cTrendAI has observed at least one \u2026\n#hackernews #news", "creation_timestamp": "2026-05-27T17:10:21.545662Z"}, {"uuid": "be94d00b-6e72-4fca-a5c3-7caa39b787f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3moawisaie62n", "content": "The security platform shouldn't be the payload engine. Our latest TSUITE Playbook delivers the technical keys to neutralize the actively exploited Trend Micro Apex One Directory Traversal flaw (CVE-2026-34926). Arm your SOC and SysAdmins with raw verification telemetry now:\u2026", "creation_timestamp": "2026-06-14T13:59:16.457437Z"}, {"uuid": "97c310a1-1f55-447d-ab52-49ca143ed5ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3moglggep7k27", "content": "TrendAI Apex One\u306a\u3069\u306e\u30c8\u30ec\u30f3\u30c9\u30de\u30a4\u30af\u30ed\u88fd\u54c1\u306b\u304a\u3051\u308b\u8907\u6570\u306e\u8106\u5f31\u6027\u306b\u95a2\u3059\u308b\u6ce8\u610f\u559a\u8d77\n\nI. \u6982\u8981\n2026\u5e745\u670821\u65e5\u3001\u30c8\u30ec\u30f3\u30c9\u30de\u30a4\u30af\u30ed\u682a\u5f0f\u4f1a\u793e\u306f\u3001TrendAI Apex One\u3001Trend Micro Apex On...\n\n\u307e\u305f\u3001\u30c8\u30ec\u30f3\u30c9\u30de\u30a4\u30af\u30ed\u682a\u5f0f\u4f1a\u793e\u306fTrendAI Apex One\uff08\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u7248\uff09\u306b\u304a\u3044\u3066\u3001\u76f8\u5bfe\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u306e\u8106\u5f31\u6027\uff08CVE-2026-34926\uff09\u3092\u60aa\u7528\u3057\u305f\u653b\u6483\u3092\u78ba\u8a8d\u3057\u3066\u3044\u308b\u3068\u306e\u3053\u3068\u3067\u3059\u3002\u672c\u8106\u5f31\u6027\u304c\u3059\u3067\u306b\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u304b\u3089\u3001\u65e9\u671f\u306b\u30d1\u30c3\u30c1\u9069\u7528\u306a\u3069\u306e\u5bfe\u5fdc\u3092\u884c\u3046\u3053\u3068\u3092\u63a8\u5968\u3057\u307e\u3059\u3002\u8a73\u7d30\u306f\u3001\u30c8\u30ec\u30f3\u30c9\u30de\u30a4\u30af\u30ed\u682a\u5f0f\u4f1a\u793e\u304c\u63d0\u4f9b\u3059\u308b\u60c5\u5831\u3092\u53c2\u7167\u3057\u3066\u304f\u3060\u3055\u3044\u3002", "creation_timestamp": "2026-06-16T19:57:07.115296Z"}, {"uuid": "f31e42db-934a-446d-a44a-c35532daa830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3moj3td5e2c2y", "content": "\u300cTrendAI Apex One\u300d\u306b\u8907\u6570\u8106\u5f31\u6027 - \u4e00\u90e8\u306f\u3059\u3067\u306b\u60aa\u7528\n\n\u30c8\u30ec\u30f3\u30c9\u30de\u30a4\u30af\u30ed\u306e\u4f01\u696d\u5411\u3051\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u88fd\u54c1\u300cTrendAI Apex One\uff08\u65e7Trend Micro Apex One\uff09\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002\u4e00\u90e8\u8106\u5f31\u6027\u306f\u3001\u3059\u3067\u306b\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u308b\u3068\u3044\u3046\u3002\n\n\u540c\u793e\u306f2026\u5e745\u670821\u65e5\u3001\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30018\u4ef6\u306e\u8106\u5f31\u6027\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\u300cTrendAI Apex One\u300d\u300cTrend Micro Apex One as a Service\u300d\u300cStandard Endpoint Protection\u300d\u304c\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3002\n\n\u300cCVE-2026-34926\u300d\u306f\u3001...", "creation_timestamp": "2026-06-17T19:55:57.045380Z"}, {"uuid": "52532ff9-1e25-41db-abb1-b3aacb14a2f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3moln2wcggs2q", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog\nRelease Date May 21, 2026\n\nCVE-2025-34291 Langflow Origin Validation Error Vulnerability\nCVE-2026-34926 Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability", "creation_timestamp": "2026-06-18T20:09:44.977518Z"}, {"uuid": "bf868e1e-e146-4498-9768-daac32bb3974", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b97cb621-bf5c-473b-a253-9b63691e0301", "content": "", "creation_timestamp": "2026-06-19T12:45:11.793322Z"}, {"uuid": "b2d7dcdc-4b3f-4621-80ab-f973c40e6efe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mopx5wsnxk2s", "content": "\u7c73\u5f53\u5c40\u3001\u300cLangflow\u300d\u3084\u300cApex One\u300d\u306e\u8106\u5f31\u6027\u60aa\u7528\u306b\u6ce8\u610f\u559a\u8d77\n\n\u7c73\u5f53\u5c40\u306f\u3001\u30ed\u30fc\u30b3\u30fc\u30c9\u958b\u767a\u30c4\u30fc\u30eb\u3084\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56\u88fd\u54c1\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3001\u6ce8\u610f\u559a\u8d77\u3092\u884c\u3063\u305f\u3002\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u73fe\u5730\u6642\u95932026\u5e745\u670821\u65e5\u3001\u300cCVE-2025-34291\u300d\u300cCVE-2026-34926\u300d\u306e\u8106\u5f31\u6027\u3092\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u3078\u8ffd\u52a0\u3057\u305f\u3002\n\n\u300cCVE-2025-34291\u300d\u306f\u3001\u30ed\u30fc\u30b3\u30fc\u30c9\u958b\u767a\u30c4\u30fc\u30eb\u300cLangflow\u300d\u306b\u5224\u660e\u3057\u305f\u30aa\u30ea\u30b8\u30f3\u691c\u8a3c\u4e0d\u5099\u306b\u8d77\u56e0\u3059\u308b\u8106\u5f31\u6027\u30022025\u5e7412\u6708\u306b\u5831\u544a\u3055\u308c\u305f\u3002\n\n\u30c9\u30e1\u30a4\u30f3\u3092\u307e\u305f\u304c\u308b\u901a\u4fe1\u5148\u306e...", "creation_timestamp": "2026-06-20T13:21:04.191963Z"}, {"uuid": "5086c23b-8e03-4aec-8c5b-9267b428a3f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mopyvoxdrs2s", "content": "\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30ea\u30b9\u30c8\u306b\u30c8\u30ec\u30f3\u30c9\u30de\u30a4\u30af\u30ed\u306eApex One\u3068Langflow\u3092\u8ffd\u52a0\u3057\u305f\u3002\n\n\u7c73\u56fd\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09 \u306f\u3001Windows Shell\u3068ConnectWise ScreenConnect\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\n\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3055\u308c\u305f\u4e0d\u5177\u5408\u306f\u4ee5\u4e0b\u306e\u3068\u304a\u308a\u3067\u3059\u3002\n\nCVE-2025-34291  Langflow Origin\u691c\u8a3c\u30a8\u30e9\u30fc\u306e\u8106\u5f31\u6027\nCVE-2026-34926  Trend Micro Apex...", "creation_timestamp": "2026-06-20T13:52:16.665172Z"}, {"uuid": "80cb5227-e203-4c86-add0-8568ab3c7504", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/66f8069b-2f96-4ec5-ab9f-22789e603cdf", "content": "", "creation_timestamp": "2026-06-23T14:03:37.709985Z"}, {"uuid": "4174a0a9-ca43-493d-a1f0-3f3d5605cb8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mpagoz6hdk2i", "content": "CISA confirms active zero-day exploitation of Trend Micro Apex One (CVE-2026-34926), introducing critical directory traversal and code injection risks across the endpoint control plane. Access our full executive advisory on asset mitigation and strategic governance alignment:\u2026", "creation_timestamp": "2026-06-27T02:41:36.913444Z"}, {"uuid": "7295a6fa-4f9c-476b-81a8-64921434c748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://t.me/ZerodayAlert/713", "content": "\u0421\u0440\u043e\u0447\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 Trend Micro\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Trend Micro \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u043e\u0441\u044c\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Apex One \u0438 Vision One Endpoint Security. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0446\u0435\u043d\u043a\u0443 \u043e\u0442 6,7 \u0434\u043e 7,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043a\u0430\u043a \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u0443\u044e \u0447\u0430\u0441\u0442\u044c, \u0442\u0430\u043a \u0438 \u0430\u0433\u0435\u043d\u0442\u044b \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-34926 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0439 \u0447\u0430\u0441\u0442\u0438 Apex One. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u043e\u0434\u043d\u0443 \u043f\u043e\u043f\u044b\u0442\u043a\u0443 \u0435\u0451 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u0433\u0440\u043e\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Apex One 2019 \u0434\u043e SP1 Critical Patch Build 18012, \u0430 \u0434\u043b\u044f \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0430\u0433\u0435\u043d\u0442 14.0.20731. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u0435\u0435.\n\n#trendmicro #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #apexone #\u043f\u0430\u0442\u0447 \n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:06.844506Z"}, {"uuid": "2f9bee27-5963-438b-b9ce-e2355fb60e9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "exploited", "source": "https://t.me/ZerodayAlert/713", "content": "\u0421\u0440\u043e\u0447\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 Trend Micro\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Trend Micro \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u043e\u0441\u044c\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Apex One \u0438 Vision One Endpoint Security. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0446\u0435\u043d\u043a\u0443 \u043e\u0442 6,7 \u0434\u043e 7,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043a\u0430\u043a \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u0443\u044e \u0447\u0430\u0441\u0442\u044c, \u0442\u0430\u043a \u0438 \u0430\u0433\u0435\u043d\u0442\u044b \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-34926 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0439 \u0447\u0430\u0441\u0442\u0438 Apex One. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u043e\u0434\u043d\u0443 \u043f\u043e\u043f\u044b\u0442\u043a\u0443 \u0435\u0451 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u0433\u0440\u043e\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Apex One 2019 \u0434\u043e SP1 Critical Patch Build 18012, \u0430 \u0434\u043b\u044f \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0430\u0433\u0435\u043d\u0442 14.0.20731. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u0435\u0435.\n\n#trendmicro #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #apexone #\u043f\u0430\u0442\u0447 \n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:37.827639Z"}, {"uuid": "68362779-83a3-4816-8be9-f9e97a254f2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://t.me/VulnerabilityNews/42606", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog\n\nCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2025-34291 Langflow Origin Validation Error Vulnerability\nCVE-2026-34926 Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability\nThese types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/05/21/cisa-adds-two-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-09-18T05:00:06.470060Z"}, {"uuid": "6e3ad8a4-73c8-4f57-98f8-265ca283e563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "seen", "source": "https://t.me/VulnerabilityNews/42619", "content": "TrendAI Patches Apex One Zero-Day Exploited in the Wild\n\nCVE-2026-34926 is a directory traversal flaw that can be exploited against the on-premise version of Apex One.\nThe post TrendAI Patches Apex One Zero-Day Exploited in the Wild appeared first on SecurityWeek.\nhttps://www.securityweek.com/trendai-patches-apex-one-zero-day-exploited-in-the-wild/", "creation_timestamp": "2026-09-18T05:00:06.602506Z"}, {"uuid": "ecc0ef63-48a9-47e6-a03b-34ac09f6db33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42619", "content": "TrendAI Patches Apex One Zero-Day Exploited in the Wild\n\nCVE-2026-34926 is a directory traversal flaw that can be exploited against the on-premise version of Apex One.\nThe post TrendAI Patches Apex One Zero-Day Exploited in the Wild appeared first on SecurityWeek.\nhttps://www.securityweek.com/trendai-patches-apex-one-zero-day-exploited-in-the-wild/", "creation_timestamp": "2026-09-19T00:00:45.501267Z"}, {"uuid": "f550deb3-a710-402e-a2e8-9bd69c033603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34926", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42606", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog\n\nCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2025-34291 Langflow Origin Validation Error Vulnerability\nCVE-2026-34926 Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability\nThese types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/05/21/cisa-adds-two-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-09-19T00:00:45.580904Z"}]}