CVE-2025-49216

An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods as an admin user and modify product configurations on affected installations.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - security@trendmicro.com

Published

2025-06-17

Last modified

2025-06-18

Weaknesses

CWE-477

Affected products

• Endpoint Encryption Policy Server (Trendmicro)
• Trend Micro Endpoint Encryption (Trendmicro)

References

• https://success.trendmicro.com/en-US/solution/KA-0019928
• https://www.zerodayinitiative.com/advisories/ZDI-25-373/