Skip to content
OpenAdvisories
Critical · 9.4 Known exploited CVE-2025-54948 EUVD-2025-23621GHSA-9r9v-427h-5388

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious…

Published Aug 5, 2025 · Updated Oct 21, 2025 · Assigned by trendmicro

Description

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.

Affected products

VendorProductAffectedFixed
Trend Micro Trend Micro Apex One 2019 (14.0) – < 14.0.0.14039 14.0.0.14039

Advisories 2

References