CyberSec.Space Logo
Back to CVE Browser

CVE-2025-54948

🔥 Known Exploited (CISA KEV)CRITICAL
9.4
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2025-08-05
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.

Affected Platforms (CPE)

📦
Trendmicro

Apex One

= 2019

References & Advisories

🔗 https://success.trendmicro.com/en-US/solution/KA-0020652
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-54948

Related Vulnerabilities

CVE-2026-64535

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kuma...

CVE-2026-64531

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open ...

CVE-2026-9830

The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, lea...

CVE-2026-14289

The FacturaONE para WooCommerce con VeriFactu WordPress plugin before 5.37 does not authenticate one of its request handlers, whos...