What is the CVSS score of CVE-2025-54948?

CVE-2025-54948 has a CVSS 3.1 base score of 9.4 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H. EPSS exploitation probability: 4.5%.

Which versions of Apex One are affected by CVE-2025-54948?

CVE-2025-54948 presents critical security risk, a OS command injection vulnerability rated CVSS 9.4.. A patch is available.

Is CVE-2025-54948 being actively exploited?

Yes, CVE-2025-54948 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, confirming active in-the-wild exploitation. Immediate patching is required.

How to fix or mitigate CVE-2025-54948?

Within 24 hours: Identify all affected systems and apply vendor patches immediately. Validate that input sanitization is in place for all user-controlled parameters.

Apex One CVE-2025-54948

CRITICAL

OS Command Injection (CWE-78)

2025-08-05 security@trendmicro.com

Command Injection Apex One

9.4

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 19:05 vuln.today

Patch released

Mar 28, 2026 - 19:05 nvd

Patch available

Added to CISA KEV

Oct 31, 2025 - 14:42 cisa

CISA KEV

CVE Published

Aug 05, 2025 - 13:15 nvd

CRITICAL 9.4

DescriptionNVD

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.

AnalysisAI

Trend Micro Apex One on-premise management console allows pre-authenticated remote attackers to upload malicious code and execute commands, enabling complete server compromise.

Technical ContextAI

The CWE-78 OS command injection through the management console allows pre-authenticated attackers to upload malicious payloads and execute OS commands on the Apex One server.

RemediationAI

Apply Trend Micro patches. Restrict management console access. Monitor for unauthorized policy changes across managed endpoints.

CVE-2025-54948 vulnerability details – vuln.today

Back