Changeflow GovPing Data Privacy & Cybersecurity Trend Micro Deep Discovery Inspector Vulnerabil...
Priority review Notice Added Final

Trend Micro Deep Discovery Inspector Vulnerability Allows Remote Code Execution

Favicon for www.cert.ssi.gouv.fr CERT-FR Security Advisories
Published
Detected
Email

Summary

CERT-FR has issued an advisory regarding a critical vulnerability in Trend Micro Deep Discovery Inspector. The vulnerability, identified as CVE-2025-15467, allows for remote code execution and denial of service. Affected versions require immediate patching.

Published by CERT-FR on cert.ssi.gouv.fr . Detected, standardized, and enriched by GovPing. Review our methodology and editorial standards .

What changed

CERT-FR, the French national cybersecurity agency, has published an advisory (CERTFR-2026-AVI-0348) detailing a critical vulnerability (CVE-2025-15467) affecting Trend Micro Deep Discovery Inspector. This vulnerability enables remote attackers to achieve arbitrary code execution and cause a denial of service on affected systems. The advisory lists specific affected versions, ranging from 6.5 to 6.8 SP2, and directs users to Trend Micro's security bulletin for patch information.

Organizations utilizing Trend Micro Deep Discovery Inspector must immediately consult Trend Micro's security bulletin (KA-0022773) and apply the necessary patches to mitigate the risk of remote code execution and denial of service. Failure to do so could lead to significant security breaches, including unauthorized access and system disruption. This advisory highlights the importance of timely vulnerability management and patching for critical security infrastructure.

What to do next

  1. Consult Trend Micro security bulletin KA-0022773 for patch details
  2. Apply necessary patches to affected Trend Micro Deep Discovery Inspector versions
  3. Review system logs for any signs of exploitation

Archived snapshot

Mar 24, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 24 mars 2026 N° CERTFR-2026-AVI-0348 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Vulnérabilité dans Trend Micro Deep Discovery Inspector

Gestion du document

| Référence | CERTFR-2026-AVI-0348 |
| Titre | Vulnérabilité dans Trend Micro Deep Discovery Inspector |
| Date de la première version | 24 mars 2026 |
| Date de la dernière version | 24 mars 2026 |
| Source(s) | Bulletin de sécurité Trend Micro KA-0022773 du 23 mars 2026 |
Une gestion de version détaillée se trouve à la fin de ce document.


Risques

  • Déni de service à distance
  • Exécution de code arbitraire à distance

Systèmes affectés

  • Deep Discovery Inspector versions 6.5 build x antérieures à 6.5 build 1197
  • Deep Discovery Inspector versions 6.6 build x antérieures à 6.6 build 1107
  • Deep Discovery Inspector versions 6.7 build x antérieures à 6.7 build 1116
  • Deep Discovery Inspector versions 6.7 SP1 build x antérieures à 6.7 SP1 build 1093
  • Deep Discovery Inspector versions 6.8 build x antérieures à 6.8 build 1139
  • Deep Discovery Inspector versions 6.8 SP1 build x antérieures à 6.8 SP1 build 1135
  • Deep Discovery Inspector versions 6.8 SP2 build x antérieures à 6.8 SP2 build 1053

Résumé

Une vulnérabilité a été découverte dans Trend Micro Deep Discovery Inspector. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance et un déni de service à distance.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Documentation


Gestion détaillée du document

  1. le 24 mars 2026 Version initiale

Get daily alerts for CERT-FR Security Advisories

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from CERT-FR.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Classification

Agency
CERT-FR
Published
March 24th, 2026
Instrument
Notice
Legal weight
Non-binding
Stage
Final
Change scope
Substantive
Document ID
CERTFR-2026-AVI-0348

Who this affects

Applies to
Technology companies
Industry sector
5112 Software & Technology
Activity scope
Network Security Monitoring Intrusion Detection
Geographic scope
France FR

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Compliance frameworks
NIST CSF
Topics
Vulnerability Management Network Security

Get alerts for this source

We'll email you when CERT-FR Security Advisories publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!