CVE-2025-54948
Trend Micro Apex One OS Command Injection Vulnerability
Published Aug 5, 2025 · updated Jun 17, 2026 · trendmicro apex one
Trend Micro Apex One Management Console (on-premise) contains an OS command injection vulnerability that could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Aug 5, 2025 · Catalog
Detected
Trend Micro Apex One Management Console (on-premise) contains an OS command injection vulnerability that could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.
Aug 18, 2025 · CISA KEV
Known exploited
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Sep 8, 2025 · CISA KEV
Remediation due
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Jun 17, 2026 · Catalog
Updated
Trend Micro Apex One Management Console (on-premise) contains an OS command injection vulnerability that could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CISA due date Sep 8, 2025
Affected
- cpe trendmicro/apex one2019
- vendor Trend Micro Apex Oneversion unspecified
Sources
- CISA KEVConfirmed exploitationCVE-2025-54948
Trend Micro Apex One Management Console (on-premise) contains an OS command injection vulnerability that could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.
cisa.gov - CVE.orgVulnerability recordCVE-2025-54948
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2025-54948
30-day exploitation probability 23.9%
first.org - NIST NVDVulnerability recordCVE-2025-54948
A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.
nvd.nist.gov