Known Exploited Vulnerabilities August 18, 2025 · CISA KEV Catalog

CVE-2025-54948: Trend Micro Apex One OS Command Injection Vulnerability

Trend Micro Apex One Management Console (on-premise) contains an OS command injection vulnerability that could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2025-54948Trend Micro

Related

CVE-2026-34926: Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability Known Exploited Vulnerabilities · May 21, 2026

CVE-2023-41179: Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Sep 21, 2023

CVE-2022-40139: Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability Known Exploited Vulnerabilities · Sep 15, 2022