CyberzSOC

If these vulnerabilities are exploited, an unauthenticated attacker may execute arbitrary code. Trend Micro Incorporated has reported that attacks exploiting CVE-2025-54948 have been observed in the wild. Since the vulnerabilities are already being exploited in the wild, the users of the affected products are recommended to update the affected system to the latest version as soon as possible. ITW CRITICAL SECURITY BULLETIN: Trend Micro Apex One (On-Premise) Management Console Command Injection RCE Vulnerabilities [Important Notice] Respond to Confirmed Attacks Exploiting Vulnerabilities in Trend Micro Endpoint Security Products (Text in Japanese) Affected products and versions are as follows: As for Trend Micro Apex One as a Service and Trend Vision One Endpoint Security - Standard Endpoint Protection, the vulnerabilities have already been mitigated in the July 31, 2025 updates. The users of Trend Micro Apex One On Premise (2019) are recommended to apply Fixtool.