CVE-2025-54948 Trend Micro Apex One
Trend Micro Apex One Management Console (on-premise) contains an OS command injection vulnerability that could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.
- CVSS
- not scored
On CISA’s exploited list
Trend Micro Apex One OS Command Injection Vulnerability
- Added
- 2025-08-18
- Federal patch deadline
- 2025-09-08
- Ransomware use
- not known