VULNERABILITY INTELLIGENCE

CVE-2025-54948

CVSS score9.4 CRITICAL
EPSS probability25.40%
CISA KEVKnown exploited vulnerability
Published2025-08-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

Known Exploited Vulnerability

Trend Micro Apex One OS Command Injection Vulnerability

Vendor / product: Trend Micro / Apex One

Description

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.

Weakness classification

  • security@trendmicro.com: CWE-78

Primary references