InfoSecBulletin Cybersecurity for mankind
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has included the critical Trend Micro Apex One vulnerability, CVE-2025-54948, in its Known Exploited Vulnerabilities (KEV) Catalog due to active exploitation.
Trend Micro Apex One is a popular endpoint security platform that detects and responds to malware and other security threats.
India’s Tata Electronics hit by cyber breach: Hacker target 630 GB record
Anthropic’s Mythos reportedly broke NSA classified systems in hours
OpenAI New Method “Deployment Simulation” Predicts AI Risks Before Deployment
AryStinger botnet infected thousands of D-Link routers globally
Hacker suspected of sending alerts across Brazil
CyberSentinel AI features 33 security tools like Nmap, SQLMap, and ZAP, utilizing Claude and GPT
Barracuda hosts Dhaka roundtable on cyber resilience
CISA Alerts Fortinet Users as FortiBleed Affects 86,644 FortiGate Devices
CISA: Splunk flaw under active exploit, patch by Sunday
Texas data breach exposes 3 million driver’s licenses
However, the newly disclosed flaw poses a severe risk to organizations relying on the software for protection.
According to Trend Micro’s advisory, the vulnerability is a remote code execution (RCE) bug caused by a command injection weakness in the Apex One Management Console (on-premise). Alarmingly, the flaw can be exploited without authentication, allowing attackers to execute arbitrary commands remotely.
Trend Micro explains:
“While it will fully protect against known exploits, it will disable the ability for administrators to utilize the Remote Install Agent function to deploy agents from the Trend Micro Apex One Management Console.”
Trend Micro has confirmed at least one exploitation attempt:
“Trend Micro has observed at least one instance of an attempt to actively exploit one of these vulnerabilities in the wild.”
This situation emphasizes the urgent need to apply patches, as attackers are searching for unprotected systems. Organizations with exposed on-premise consoles are at the highest risk.
CISA has directed all Federal Civilian Executive Branch (FCEB) agencies to fix the vulnerability by September 8, 2025. This order promotes prompt action in federal networks and emphasizes the need for private-sector organizations to act quickly as well.
