InfoSecBulletin Cybersecurity for mankind
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has included the critical Trend Micro Apex One vulnerability, CVE-2025-54948, in its Known Exploited Vulnerabilities (KEV) Catalog due to active exploitation.
Trend Micro Apex One is a popular endpoint security platform that detects and responds to malware and other security threats.
Ransomware Crisis in 2026: 5,064 Organizations Affected in 135 Countries
Palo Alto Networks Addresses 13 Vulnerabilities
Critical Dell BIOS & Zimbra Flaws Expose Enterprise Systems
CoLoCity Launches New 1.0 MW Data Center Facility at Gulshan
Daily Cyber security update for 10. 07. 2026
How Hacker Compromise AWS Cloud Environment Using AI in 72 Hours
Mycelium Framework: First AI-as-a-Service Botnet
CrowdStrike Shows 5 New Prompt Injection Techniques for AI Agents
Critical GCP Dialogflow Vulnerability Allows Malicious Code Injection
CIRT identified 153 publicly exposed FortiGate devices in Bangladesh
However, the newly disclosed flaw poses a severe risk to organizations relying on the software for protection.
According to Trend Micro’s advisory, the vulnerability is a remote code execution (RCE) bug caused by a command injection weakness in the Apex One Management Console (on-premise). Alarmingly, the flaw can be exploited without authentication, allowing attackers to execute arbitrary commands remotely.
Trend Micro explains:
“While it will fully protect against known exploits, it will disable the ability for administrators to utilize the Remote Install Agent function to deploy agents from the Trend Micro Apex One Management Console.”
Trend Micro has confirmed at least one exploitation attempt:
“Trend Micro has observed at least one instance of an attempt to actively exploit one of these vulnerabilities in the wild.”
This situation emphasizes the urgent need to apply patches, as attackers are searching for unprotected systems. Organizations with exposed on-premise consoles are at the highest risk.
CISA has directed all Federal Civilian Executive Branch (FCEB) agencies to fix the vulnerability by September 8, 2025. This order promotes prompt action in federal networks and emphasizes the need for private-sector organizations to act quickly as well.
