CVE-2025-54987

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is essentially the same as CVE-2025-54948 but targets a different CPU architecture.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - security@trendmicro.com

Published

2025-08-05

Last modified

2026-02-26

Weaknesses

CWE-78

Affected products

• Apex One (Trendmicro)
• Apexone Server (Trendmicro)

References

• https://success.trendmicro.com/en-US/solution/KA-0020652