CVE-2025-49212

Critical · 9.8

CVSS

9.8

EPSS

13.3%

Published

Jun 17, 2025

CISA due date

—

The record

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49220 but is in a different method.

Affected packages

Ecosystem	Package	Introduced	Fixed