PT-2025-31926 · Trend Micro · Trend Micro Apex One

Jacky Hsieh · Published 2025-08-01 · Updated 2026-04-19 · CVE-2025-54987

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One (affected versions not specified)

Description A vulnerability exists in the Trend Micro Apex One management console that stems from a lack of proper validation of user-supplied strings before they are used to execute system calls. Exploitation may allow a remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is similar to CVE-2025-54948 but targets a different CPU architecture.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2025-09573

CVE-2025-54987

ZDI-25-772

ZDI-26-270

Affected Products

Trend Micro Apex One

References · 60

• https://success.trendmicro.com/en-US/solution/KA-0020652 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54987 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-26-270 · Security Note
• https://bdu.fstec.ru/vul/2025-09573 · Security Note
• https://osv.dev/vulnerability/CVE-2025-54987 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-25-772 · Security Note
• https://twitter.com/catnap707/status/1953221333296529916 · Twitter Post
• https://twitter.com/autumn_good_35/status/1953056813718573134 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1sotjei/top_10_trending_cves_18042026 · Reddit Post
• https://twitter.com/TweetThreatNews/status/1953130142139547681 · Twitter Post
• https://twitter.com/securityRSS/status/1953132568464805974 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1spovbk/top_10_trending_cves_19042026 · Reddit Post
• https://twitter.com/ggrubamn/status/1955285312009277522 · Twitter Post
• https://twitter.com/UjlakiMarci/status/1952729021210361966 · Twitter Post
• https://t.me/CVEtracker/29200 · Telegram Post