Search: CVE-2025-54948

CVE-2025-54948 is a critical OS command injection vulnerability in the on-premise management console of Trend Micro Apex One version 2019 (14.0). It allows a remote attacker to upload malicious code and execute commands without authentication. The vulnerability has a high CVSS score of 9.4, indicating severe potential impact on confidentiality, integrity, and availability. No official patch or remediation information is currently provided by the vendor. There are no known exploits in the wild at this time.