Firetruck

CVE-2025-54948

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Trend Micro Apex One Management Console (on-premise) contains an OS command injection vulnerability that could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Trend Micro Apex OneTrend Micro, Inc. / Trend Micro Apex One>= 2019 (14.0), < 14.0.0.14039affected