InfoSecBulletin Cybersecurity for mankind
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has included the critical Trend Micro Apex One vulnerability, CVE-2025-54948, in its Known Exploited Vulnerabilities (KEV) Catalog due to active exploitation.
Trend Micro Apex One is a popular endpoint security platform that detects and responds to malware and other security threats.
Barracuda ESG flaws exploited, gaining root access
Apple, SAP, and Ivanti Patch Critical flaws Affecting Messaging, Bluetooth, and Enterprise Systems
Jailbroken DeepSeek AI Agent Conducts Two-Week Cyberattack on European Telecom
Daily Cyber security update for 10.11. 2026
IBM fixes 208 API Connect vulnerabilities, 47 critical
89 New ransomware groups emerge in 2026, claiming over 2,200 victims
Daily Cyber security update for 08.11. 2026
Japan banking crisis
Outage causes disruption at 128 japan banks: preventing ATM transaction
Daily Cyber security update for 06.11. 2026
Cyber attack causes French bank Credit Mutuel Arkea €100 million missing
However, the newly disclosed flaw poses a severe risk to organizations relying on the software for protection.
According to Trend Micro’s advisory, the vulnerability is a remote code execution (RCE) bug caused by a command injection weakness in the Apex One Management Console (on-premise). Alarmingly, the flaw can be exploited without authentication, allowing attackers to execute arbitrary commands remotely.
Trend Micro explains:
“While it will fully protect against known exploits, it will disable the ability for administrators to utilize the Remote Install Agent function to deploy agents from the Trend Micro Apex One Management Console.”
Trend Micro has confirmed at least one exploitation attempt:
“Trend Micro has observed at least one instance of an attempt to actively exploit one of these vulnerabilities in the wild.”
This situation emphasizes the urgent need to apply patches, as attackers are searching for unprotected systems. Organizations with exposed on-premise consoles are at the highest risk.
CISA has directed all Federal Civilian Executive Branch (FCEB) agencies to fix the vulnerability by September 8, 2025. This order promotes prompt action in federal networks and emphasizes the need for private-sector organizations to act quickly as well.
