TREND MICRO FIXED A REMOTE CODE EXECUTION IN APEX CENTRAL

Summary from the TLDR InfoSec newsletter

Trend Micro patched three vulnerabilities in Apex Central on-premise, including a critical RCE flaw in LoadLibraryEX (CVE-2025-69258, CVSS 9.8) that allows unauthenticated attackers to execute code as SYSTEM by loading malicious DLLs. Tenable disclosed the vulnerabilities along with PoC exploit code after discovering them in August. Organizations running Apex Central below Build 7190 should apply the critical patch immediately and restrict remote access to management consoles.