Trend Micro users beware - dangerous Apex One zero-day exploited in the wild

A hooded figure in front of a laptop. Digital symbols obscure his face and appear to be pouring out of his head.

• Trend Micro patches CVE‑2026‑34926, a medium‑severity directory traversal flaw in Apex One (on‑prem) that lets local admins inject malicious code
• Despite requiring prior admin access, the bug is already being exploited in the wild, prompting urgent patching guidance
• CISA adds it to the KEV catalog, giving federal agencies until June 4 2026 to update or discontinue use per BOD 22‑01 directives

A dangerous vulnerability in Trend Micro’s Apex One product is being actively abused in the wild, researchers have warned, urging users to apply the provided patch as soon as possible.