EIP-2026-112791

This advisory details an unauthenticated Server-Side Request Forgery (SSRF) vulnerability in Trend Micro OfficeScan XG (12.0) and v11.0, allowing attackers to make arbitrary HTTP requests via the 'help_Proxy.php' endpoint. The writeup includes a proof-of-concept URL and technical details about the vulnerability.