Resolved: CVE Advisory -2026-94367

CVE-2026-94367 is resolved in Apex Server Software version 3.4.3 and later. We strongly recommend all users to update to the latest firmware promptly.

Note: Exploitation requires an existing, authenticated administrator account. Limiting administrator privileges to trusted users and following least-privilege account-management practices reduces exposure.

Acknowledgements: We would like to thank Ryan Wincey of Securifera https://www.securifera.com/ for his coordinated vulnerability disclosure efforts.