Firewalls, VPNs and routers

Trend Micro security incident history

Updated Oct 26, 2026. Data gathered daily from official public sources.

As of Oct 26, 2026, Vendor History found 12 actively exploited security flaws for Trend Micro, dated Nov 3, 2021 to May 21, 2026. Sources checked: the California and Washington Attorney General breach lists and CISA's Known Exploited Vulnerabilities catalog.

Breach notices and SEC cyber filings

None found in the sources we check.

Got a breach letter from Trend Micro? What to do when a vendor has a data breach.

Actively exploited security flaws

Flaws in Trend Micro products that CISA lists as exploited by attackers. If you use an affected product, check that it's updated. What a listing means.

1. May 21, 2026Exploited flaw

   Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability (CVE-2026-34926). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

2. Aug 18, 2025Exploited flaw

   Trend Micro Apex One OS Command Injection Vulnerability (CVE-2025-54948). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

3. Sep 21, 2023Exploited flaw

   Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability (CVE-2023-41179). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

4. Sep 15, 2022Exploited flaw

   Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability (CVE-2022-40139). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

5. Mar 31, 2022Exploited flaw

   Trend Micro Apex Central Arbitrary File Upload Vulnerability (CVE-2022-26871). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

6. Nov 3, 2021Exploited flaw

   Trend Micro OfficeScan Directory Traversal Vulnerability (CVE-2019-18187). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

7. Nov 3, 2021Exploited flaw

   Trend Micro Multiple Products Improper Access Control Vulnerability (CVE-2020-24557). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

8. Nov 3, 2021Exploited flaw

   Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability (CVE-2020-8467). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

9. Nov 3, 2021Exploited flaw

   Trend Micro Multiple Products Content Validation Escape Vulnerability (CVE-2020-8468). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

10. Nov 3, 2021Exploited flaw

    Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability (CVE-2020-8599). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

11. Nov 3, 2021Exploited flaw

    Trend Micro Multiple Products Improper Input Validation Vulnerability (CVE-2021-36741). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

12. Nov 3, 2021Exploited flaw

    Trend Micro Multiple Products Improper Input Validation Vulnerability (CVE-2021-36742). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

We check: California and Washington Attorney General breach notices, SEC cyber incident filings (Form 8-K, Item 1.05) and CISA's catalog of actively exploited security flaws. An empty section means we found nothing in those sources. It does not mean nothing happened. How it works

To cite: Vendor History, "Trend Micro security incident history," vendorhistory.com/vendor/trend-micro, data checked Oct 26, 2026. Free to reuse under CC BY 4.0 with credit to Vendor History.