CVE-2025-54987

Critical · 9.8

CVSS

9.8

EPSS

19.7%

Published

Aug 5, 2025

CISA due date

—

The record

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is essentially the same as CVE-2025-54948 but targets a different CPU architecture.

Affected packages

Ecosystem	Package	Introduced	Fixed