CVE-2025-54948
Trend Micro Apex One
Trend Micro Apex One OS Command Injection Vulnerability
What it is
Trend Micro Apex One Management Console (on-premise) contains an OS command injection vulnerability that could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.
What to do
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Trend Micro entries on the list
- Apex One Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability CVE-2026-34926 · May 21, 2026
- Apex One and Worry-Free Business Security Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability CVE-2023-41179 · Sep 21, 2023
- Apex One and Apex One as a Service Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability CVE-2022-40139 · Sep 15, 2022
- Apex Central Trend Micro Apex Central Arbitrary File Upload Vulnerability CVE-2022-26871 · Mar 31, 2022
- Apex One, Apex One as a Service, and Worry-Free Business Security Trend Micro Multiple Products Improper Input Validation Vulnerability CVE-2021-36742 · Nov 3, 2021
- Apex One, Apex One as a Service, and Worry-Free Business Security Trend Micro Multiple Products Improper Input Validation Vulnerability CVE-2021-36741 · Nov 3, 2021