CVE-2025-54987: Trend Micro Apex One

Critical severity, CVSS 9.8. EPSS: 19.7% chance of exploitation in the next 30 days.

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is essentially the same as CVE-2025-54948 but targets a different CPU architecture.

Affected products

• Trend Micro Apex One: version 2019 only

Published 2025-08-05. Last modified 2026-06-17.