CVE-2025-54948: Trend Micro Apex One OS Command Injection Vulnerability
A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.
Affected Software
Remediation
Patch Available
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-54948?
CVE-2025-54948 is considered a high-severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2025-54948?
To fix CVE-2025-54948, update to the latest version of Trend Micro Apex One provided by the vendor.
What are the potential impacts of CVE-2025-54948?
CVE-2025-54948 could allow an attacker to upload malicious code and execute commands on affected Trend Micro Apex One installations.
Who is affected by CVE-2025-54948?
Organizations using the on-premise version of Trend Micro Apex One management console are affected by CVE-2025-54948.
Is CVE-2025-54948 being actively exploited?
At this time, there is no public information indicating that CVE-2025-54948 is being actively exploited in the wild.