CVE-2025-54987 — OS Command Injection in Micro INC Trend Micro Apex ONE

CWE-78 — OS Command Injection6 documents6 sources
Severity
9.8CRITICALNVD
CNA9.4VulnCheck9.4
EPSS
0.8%
top 25.89%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Trend Micro INC Trend Micro Apex ONETrendmicro Apex ONE
Timeline
PublishedAug 5
Latest updateAug 6

Description

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is essentially the same as CVE-2025-54948 but targets a different CPU architecture.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5trend_micro_inc/trend_micro_apex_one2019 (14.0) — 14.0.0.14039

Patches

Patch: success.trendmicro.com ↗

🔴Vulnerability Details

3
CVEList
CVE-2025-54987: A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and e↗2025-08-05
▶
GHSA
GHSA-8q59-7jj3-fj58: A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and e↗2025-08-05
▶
VulnCheck
Trend Micro Apex One and Apex One as a Service Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')↗2025
▶

🕵️Threat Intelligence

1
Bleepingcomputer
Trend Micro warns of Apex One zero-day exploited in attacks↗2025-08-06
▶
CVE-2025-54987 — OS Command Injection | cvebase