Trellix vulnerabilities

CVEs per yearBy the year they were published

1. 20228
2. 202319
3. 202417
4. 20257
5. 20267

Newest CVEs

• CVE-2026-115740

  Server side request forgery vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows the file Prefix parameter in the…

  Trellix · DLP on-prem extensions

  Medium5.3
• CVE-2026-115739

  Hard-coded Cryptographic Key vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows a remote attacker to decrypt credentials and…

  Trellix · DLP on-prem extensions

  Medium6.0
• CVE-2026-115738

  SQL injection vulnerability in DLP on-prem extensions version 11.13.1 and earlier allows a remote authenticated attacker to inject SQL queries without…

  Trellix · DLP on-prem extensions

  High7.1
• CVE-2026-107171

  An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decryption by Regular Users.

  Trellix · Trellix Agent

  Medium6.9
• CVE-2026-12588

  An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data to the HX console. The malicious detection would then trigger…

  Trellix · Trellix HX Console

  Medium6.0
• CVE-2025-7958

  A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web…

  Trellix · Trellix Network Security NX, EX, FX, AX, and CMS

  High7.1
• CVE-2025-14963

  A vulnerability identified in the HX Agent driver file fekern.sys allowed a threat actor with local user access the ability to gain elevated system privileges.…

  Trellix · Endpoint HX Agent (xAgent)

  Medium6.2
• CVE-2025-0664

  A locally authenticated, privileged user can craft a malicious OpenSSL configuration file, potentially leading the agent to load an arbitrary local library.…

  Trellix · Trellix Endpoint Security (HX) Agent

  Medium6.7
• CVE-2025-5967

  A stored cross-site scripting vulnerability in ENS HX 10.0.4 allows a malicious user to inject arbitrary HTML into the ENS HX Malware Scan Name field,…

  Trellix · Endpoint Security HX

  Medium5.3
• CVE-2025-3773

  A sensitive information exposure vulnerability in System Information Reporter (SIR) 1.0.3 and prior allows an authenticated non-admin local user to extract…

  Trellix · System Information Reporter

  None0.0