Trend Micro

Apex Central / Apex One (on-premises)

Response status

Interim mitigation; permanent patch pending

Response information checked

2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Provides endpoint, server and network protection.

Both products are affected; Critical Patches are expected November 11. Interim steps require Central Build 7328+ or Apex One Build 18012+.

Scope: An ETA is not completion. This status does not apply to Apex One SaaS or other Trend products.

What users should do

Apply the product-specific official workaround and monitor patch availability.

Official service URL

• https://www.trendmicro.com/

Source URLs

1. https://success.trendmicro.com/en-US/solution/KA-0024802https://success.trendmicro.com/en-US/solution/KA-0024802Response evidence
2. PHP2Shell impact and mitigation for Apex productshttps://success.trendmicro.com/en-US/solution/KA-0024815Response evidence

Trend Micro Web Security (TMWS)

Response status

Mitigation in development

Response information checked

2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The official product table marks TMWS affected, with mitigation in development.

Scope: Do not inherit Apex patch dates.

What users should do

Check your deployment and follow TMWS-specific updates.

Source URLs

1. https://success.trendmicro.com/en-US/solution/KA-0024802https://success.trendmicro.com/en-US/solution/KA-0024802Response evidence

Deep Discovery Inspector (DDI)

Response status

Patch pending

Response information checked

2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The product table marks it affected, with a Critical Patch expected October 30.

Scope: October 30 is an ETA, not completion.

What users should do

Monitor this product's patch release and apply it using official instructions.

Source URLs

1. https://success.trendmicro.com/en-US/solution/KA-0024802https://success.trendmicro.com/en-US/solution/KA-0024802Response evidence

Deep Discovery Analyzer (DDAN)

Response status

Patch pending

Response information checked

2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The product table marks it affected, with a Critical Patch expected October 30.

Scope: October 30 is an ETA, not completion.

What users should do

Monitor this product's patch release and apply it using official instructions.

Source URLs

1. https://success.trendmicro.com/en-US/solution/KA-0024802https://success.trendmicro.com/en-US/solution/KA-0024802Response evidence

Deep Discovery Email Inspector (DDEI)

Response status

Patch pending

Response information checked

2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The product table marks it affected, with a Critical Patch expected October 30.

Scope: October 30 is an ETA, not completion.

What users should do

Monitor this product's patch release and apply it using official instructions.

Source URLs

1. https://success.trendmicro.com/en-US/solution/KA-0024802https://success.trendmicro.com/en-US/solution/KA-0024802Response evidence

Apex One as a Service / Vision One Standard Endpoint Security

Response status

Addressed by emergency maintenance

Response information checked

2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The official table reports remediation through emergency maintenance on October 23.

Scope: This cloud service is separate from on-premises Apex One.

What users should do

Check notices for your cloud-managed environment.

Source URLs

1. https://success.trendmicro.com/en-US/solution/KA-0024802https://success.trendmicro.com/en-US/solution/KA-0024802Response evidence