Summary
| Parameter | Value |
|---|---|
| CVE ID | CVE-2026-45206 (ZDI-CAN-28118) |
| Alert Source | Trend Micro Security Bulletin (KA-0023430) |
| CVE Publication Year | 2026 |
| Date Published | 2026-05-28 |
| Vendor | Trend Micro |
| Product | Apex One / Vision One Endpoint Security SEP |
| Vulnerability Type | Origin Validation Error (CWE-346) - LPE |
| CVSS Score | 7.8 (high) |
| CISA KEV | No |
| Ransomware | Not confirmed |
Vulnerability Description
Source: Trend Micro Security Bulletin
An origin validation vulnerability in the Trend Micro Apex One / SEP agent could allow a local attacker to escalate privileges. Similar to CVE-2026-45207, but exists in a different process protection communication mechanism.
Fifth of 7 similar LPEs in bulletin KA-0023430. Full context — see CVE-2026-34927.
Required Actions
All 8 vulnerabilities in bulletin KA-0023430 are addressed by a single patch package — see CVE-2026-34927:
- Apex One (on-prem): SP1 CP Build 18012 (agent 14.0.0.17079)
- Apex One as a Service / Vision One SEP: Agent build 14.0.20731
Who Is Affected?
Full list of affected versions — see CVE-2026-34927. Apex One (on-prem) Server/Agent < 17079 and Apex One as a Service / Vision One SEP Agent < 14.0.20731.
Sources
Need help securing your systems? nFlo team offers vulnerability management and 24/7 SOC services. Contact us.
