Back to CVE Lookup

CVE-2025-54948

CRITICAL - CVSS 9.4CWE-78
Published: 8/5/2025
Modified: 10/31/2025

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.

Vulnerability Summary

CVSS v3 Score

9.4CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

CWE Classification