Description
A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is essentially the same as CVE-2025-54948 but targets a different CPU architecture.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Trend Micro | Trend Micro Apex One | 2019 (14.0) – < 14.0.0.14039 | 14.0.0.14039 |
Advisories 2
- WID-SEC-2025-1727 Trend Micro Apex One: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Aug 21, 2025
- NCSC-2025-0242 Kwetsbaarheden verholpen in Trend Micro Apex One NCSC-NL (Netherlands) · Aug 6, 2025