This Critical Patch resolves the following issue(s):
Deep Discovery Inspector is affected by a CVE-2025-15467 vulnerability.
Solution
This Hotfix resolves this vulnerability.
There are no files included in this Critical Patch release.
To download or view electronic versions of the documentation set for this product, go to http://docs.trendmicro.com
To access the Online Help, go to http://docs.trendmicro.com
1. Deep Discovery Inspector 6.8 GM Build 1106 - English - Linux - x64
To install:
To roll back to the previous build:
No post-installation steps are required.
NOTE: Trend Micro recommends that you update your scan engine and virus pattern files immediately after installing the product.
There are no known issues for this Critical Patch release.
When Port Binding is enabled, Deep Discovery Inspector cannot register to Trend Vision One because it incorrectly uses the management port for connection, which lacks internet access. Instead, it should use the system port.
Solution
This hotfix ensures that Deep Discovery Inspector uses the system port to connect to Trend Vision One when Port Binding is enabled.
Users cannot save proxy settings from the Deep Discovery Inspector web console in special network environments.
Solution
This hotfix resolves this issue.
A defect in Deep Discovery Inspector causes delays in the renewal of the Trend Vision One access token.
As a result, Deep Discovery Inspector:
Solution
This hotfix resolves the issue.
Users cannot save proxy settings from the Deep Discovery Inspector web console in special network environments.
Solution
This hotfix resolves this issue.
A race condition in the Network Content Inspection engine might cause Deep Discovery Inspector to restart unexpectedly.
Solution
This hotfix updates the Network Content Inspection engine to resolve this issue.
Under certain circumstances, Deep Discovery Inspector cannot delete files from the Virtual Analyzer file queue in the database.
This causes Deep Discovery Inspector to continue sending Virtual Analyzer notification emails for previous events.
Solution
This hotfix resolves the issue and ensures Deep Discovery Inspector deletes files from the Virtual Analyzer file queue.
Deep Discovery Inspector experiences unexpected restarts triggered by the hardware watchdog when the heartbeat process becomes unresponsive.
The cause of the process failure has not been identified yet.
Solution
This hotfix addresses the reboot issue by reducing the heartbeat frequency from once per second to once per minute (60 seconds).
An issue occurs causing Deep Discovery Inspector to sometimes display an unregistered status from Trend Vision One even after registering successfully .
Solution
This hotfix resolves this issue.
Deep Discovery Inspector appliances deployed in inline mode cannot inspect TLS connections when those connections use TLS 1.3 with hybridized Kyber support.
TLS 1.3 hybridized Kyber support is enabled by default in:
Solution
This hotfix resolves this issue.
A defect causes Deep Discovery Inspector to stop scanning incoming traffic when the data port received DHCP traffic containing non-ASCII characters in the user class identifier.
This issue only happens when Deep Discovery Inspector:
Solution
This hotfix resolves the issue.
A defect in Deep Discovery Inspector (DDI) caused the DDI GUID to change unexpectedly. As a result, Network Sensor cannot be enabled on Trend Vision One due to a GUID mismatch between DDI and the GUID recorded in Trend Vision One.
Solution
This hotfix resolves the issue and ensures that Deep Discovery Inspector (DDI) maintains a consistent GUID.
At times, telemetry data loss occurs when Deep Discovery Inspector sends data to Trend Vision One.
Solution
This hotfix resolves the issue.