[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fJydZBucg7rje0m8MeIeF9P6M-oUQxqxvvvGpreRqU_I":3,"g5a-risk:CVE-2022-26871":150},{"success":4,"data":5,"meta":148},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":27,"epssTimeSeries":47,"severity":48,"affectedProducts":49,"affectedProductsCount":59,"references":60,"referencesCount":99,"weaknesses":100,"weaknessesCount":108,"isActivelyExploited":4,"cisaInfo":109,"otxData":27,"relatedBlogPosts":110,"seoMetadata":111,"configurations":136,"relatedVendorCves":146,"notableEvents":147},"CVE-2022-26871","What is CVE-2022-26871?","An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.","An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lea...","2022-03-29T21:15:07.76","2025-10-31T18:41:33.227",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":34,"CVSSMetricV2":35,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[],[36],{"Source":17,"Type":18,"CVSSData":37,"BaseSeverity":25,"ExploitabilityScore":43,"ImpactScore":44,"ACInsufInfo":45,"ObtainAllPrivilege":45,"ObtainUserPrivilege":45,"ObtainOtherPrivilege":45,"UserInteractionRequired":45},{"Version":38,"VectorString":39,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":40,"IntegrityImpact":40,"AvailabilityImpact":40,"BaseScore":41,"BaseSeverity":42,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,"",10,6.4,false,0.19481,[46,46,46,46,46,46,46],"Critical",[50,55],{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"trendmicro","apex_central","2019","cpe:2.3:a:trendmicro:apex_central:2019:-:*:*:*:windows:*:*",{"vendor":51,"product":56,"version":57,"criteria":58,"vulnerable":4},"apex_one","-","cpe:2.3:a:trendmicro:apex_one:-:*:*:*:*:saas:*:*",2,[61,66,72,77,80,84,86,88,90,92,94],{"url":62,"source":63,"tags":64},"https:\u002F\u002Fappweb.trendmicro.com\u002FsupportNews\u002FNewsDetail.aspx?id=4435","Trendmicro",[65],"Vendor Advisory",{"url":67,"source":68,"tags":69},"https:\u002F\u002Fjvn.jp\u002Fvu\u002FJVNVU99107357","Jvn",[70,71],"Third Party Advisory","VDB Entry",{"url":73,"source":63,"tags":74},"https:\u002F\u002Fsuccess.trendmicro.com\u002Fjp\u002Fsolution\u002F000290660",[75,76,65],"Mitigation","Patch",{"url":78,"source":63,"tags":79},"https:\u002F\u002Fsuccess.trendmicro.com\u002Fsolution\u002F000290678",[75,76,65],{"url":81,"source":82,"tags":83},"https:\u002F\u002Fwww.jpcert.or.jp\u002Fenglish\u002Fat\u002F2022\u002Fat220008.html","Or",[70,71],{"url":62,"source":63,"tags":85},[65],{"url":67,"source":68,"tags":87},[70,71],{"url":73,"source":63,"tags":89},[75,76,65],{"url":78,"source":63,"tags":91},[75,76,65],{"url":81,"source":82,"tags":93},[70,71],{"url":95,"source":96,"tags":97},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2022-26871","CISA",[98],"US Government Resource",11,[101],{"id":102,"name":103,"description":104,"extendedDescription":42,"status":105,"abstraction":106,"structure":107},"CWE-345","Insufficient Verification of Data Authenticity","The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.","Draft","Class","Simple",1,{"shortDescription":42,"requiredAction":42,"vulnerabilityName":42,"dateAdded":27},[],{"title":112,"metaDescription":113,"keywords":114,"canonicalUrl":115,"structuredData":116},"What is CVE-2022-26871? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-26871, a critical severity cyber security vulnerability from 2022. An arbitrary file upload vulnerability in Trend Micro A...","CVE-2022-26871, CVE-2022-26871 vulnerability, CVE-2022-26871 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, trendmicro security, apex_central vulnerability, apex_one vulnerability","\u002Fwhat-is\u002Fcve-2022-26871",{"@context":117,"@type":118,"headline":112,"description":113,"datePublished":10,"dateModified":11,"author":119,"publisher":123,"about":127,"mainEntityOfPage":131,"articleSection":134,"keywords":135},"https:\u002F\u002Fschema.org","TechArticle",{"@type":120,"name":121,"url":122},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":120,"name":121,"url":122,"logo":124},{"@type":125,"url":126},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":128,"name":6,"description":129,"additionalType":130},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":132,"@id":133},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-26871","Cybersecurity","CVE-2022-26871, CVE-2022-26871 vulnerability, CVE-2022-26871 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[137],{"Operator":27,"Negate":27,"Nodes":138},[139],{"Operator":140,"Negate":45,"CPEMatch":141},"OR",[142,144],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":143,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"7F2620DA-8727-43FF-8A4D-72145CDDE4CD",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":145,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"576055B3-C274-430E-98DA-BCC578F8C295",[],[],{"lastModified":11,"cacheTime":149,"version":38},1792284945041,{"score":151,"band":48,"action":152,"scoredAt":153},90,"Emergency patch","2026-10-16T06:53:57.382172+00:00"]