CVE-2025-49216

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods as an admin user and modify product configurations on affected installations.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-477

Affected software

Vendor	Product	Versions
Trend Micro, Inc.	Trend Micro Endpoint Encryption Policy Server	>= 6.0, < 6.0.0.4013

References

https://success.trendmicro.com/en-US/solution/KA-0019928Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-25-373/Third Party Advisory

Timeline

Published: Jun 17, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-492179.8An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code exe CVE-2025-492187.8A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges o CVE-2025-492199.8An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code exe CVE-2025-49228.1Nomad Community and Nomad Enterprise (“Nomad”) prefix-based ACL policy lookup can lead to incorrect rule application and shadowing. This vul CVE-2025-492209.8An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pre-authentication remote code exec CVE-2025-492213.7Mattermost Confluence Plugin version <1.5.0 fails to enforce authentication of the user to the Mattermost instance which allows unauthentica CVE-2025-492226.8Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17, 10.9.x <= 10.9.2, 10.10.x <= 10.10.0 fail to validate upload type CVE-2025-492239.8billboard.js before 3.15.1 was discovered to contain a prototype pollution via the function generate, which could allow attackers to execute CVE-2025-49237.3A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. This issue affect CVE-2025-492346.5Missing Authorization vulnerability in Deepak anand WP Dummy Content Generator wp-dummy-content-generator allows Exploiting Incorrectly Conf CVE-2025-492356.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rometheme RTMKit rometheme-for-element CVE-2025-492365.3Missing Authorization vulnerability in raychat Raychat raychat allows Accessing Functionality Not Properly Constrained by ACLs.This issue af