EIP-2026-119686

The advisory details three vulnerabilities in Trend Micro Deep Security 6.5: an XXE leading to arbitrary file disclosure, a local privilege escalation via SSH configuration injection, and a remote code execution via unsanitized parameters in a servlet. Proof-of-concept requests are provided for each vulnerability.