Trend Micro fixes two critical flaws in Apex One
2026-03-04T21:48:27Z•b6858b21619c73537e4831fd6341aa211149008ad9f3cde101631e211a869c73
CVE-2025-13942CVE-2026-20127CVE-2026-25108anthropicapex onecarguruscisaciscocisco talosclaude codedata breachdohdoorgoogle gtigknown exploited vulnerabilitiesl3harrisoperation zeroremote code executionsd-wanshinyhunterssoliton filezen','CVE-2026-25108trend microuat-10027unc2814zero-day traffickingzyxel
What happened
Multiple high-impact security developments: Trend Micro patched two critical Apex One vulnerabilities enabling RCE on Windows; Cisco SD‑WAN suffered a critical zero-day (CVE-2026-20127, CVSS 10.0) that has been exploited since 2023 and was added to CISA’s KEV along with other SD‑WAN flaws; Cisco SD‑WAN exploitation allows unauthenticated full admin access. Cisco Talos identified UAT-10027, a campaign targeting U.S. education and healthcare that deploys a new Dohdoor backdoor via phishing/PowerShell. Other notable items: Check Point found RCE and API-key theft bugs in Anthropic’s Claude Code; a
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- b6858b21619c73537e4831fd6341aa211149008ad9f3cde101631e211a869c73
- Enrichment time
- 2026-03-04T21:48:27Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.