VULNERABILITY INTELLIGENCE
CVE-2025-49216
CVSS score9.8 CRITICAL
EPSS probability0.55%
CISA KEVNot currently listed
Published2025-06-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods as an admin user and modify product configurations on affected installations.
Weakness classification
- security@trendmicro.com: CWE-477
Primary references
- security@trendmicro.com — Vendor Advisory
- security@trendmicro.com — Third Party Advisory