CVE-2025-54948

A vulnerability in Trend Micro Apex One on-premise management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations...

CVE-2025-54948

A vulnerability in Trend Micro Apex One on-premise management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations...

CVE-2025-54948

CVE-2025-54948 affects Trend Micro Apex One (on-premise) management console. The vulnerability is an OS command injection that could allow a pre-authenticated remote attacker to upload malicious code and execute commands. Exploitation details are supported by multiple sources in Connected documen...

Trend Micro Apex One Console Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro Apex One. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Apex One console, which listens on TCP ports 8080 and 4343 by default. The issu...

Trend Micro Apex One 安全漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro. A security vulnerability exists in Trend Micro Apex One that originates from allowing a pre-authenticated remote attacker to upload malicious code and execute commands...

Trend Micro Apex One 安全漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro. A security vulnerability exists in Trend Micro Apex One that originates from allowing a pre-authenticated remote attacker to upload malicious code and execute commands...

CVE-2025-54987: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in Trend Micro Apex One on-premise management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is essentially the same as CVE-2025-54948 but targets a different CPU architecture...

CVE-2025-54948: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in Trend Micro Apex One on-premise management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations...

PT-2025-31926

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Description A vulnerability exists in the Trend Micro Apex One management console that stems from a lack of proper validation of user-supplied strings before they are used to execute system...

PT-2025-31925

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One on-premise affected versions not specified Description A vulnerability exists in the Trend Micro Apex One on-premise management console that could allow a pre-authenticated remote attacker to upload malicious code and...

PT-2025-31346

Name of the Vulnerable Software and Affected Versions Apple macOS MediaToolbox Framework affected versions not specified Description The Apple macOS MediaToolbox Framework contains a memory corruption issue that could lead to remote code execution. The vulnerability was discovered by Hossein Lotf...

Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller

!Exploi...

The vulnerability of Trend Micro Password Manager relates to the improper handling of symbolic links before accessing a file. This allows attackers to elevate their privileges and execute arbitrary code within the SYSTEM context.

The vulnerability of the Trend Micro Password Manager storage tool is related to the improper handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code within the SYSTEM context...

The vulnerability of the GetReportDetailView method in the security monitoring and management tool Trend Micro Apex Central allows a malicious actor to execute arbitrary code in the context of NETWORK SERVICE.

The vulnerability of the GetReportDetailView method in the monitoring and security management tool Trend Micro Apex Central is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code in the context of NETWORK SERVICE...

The vulnerability of the DeserializeFromBase64String method implemented by the PolicyServer server of Trend Micro Endpoint Encryption (TMEE) allows a malicious actor to execute arbitrary code within the SYSTEM context.

The vulnerability of the DeserializeFromBase64String method implemented by the PolicyServer server of Trend Micro Endpoint Encryption TMEE involves insufficient validation of input data. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code within the SYSTE...

The vulnerability of Trend Micro Apex One and Apex One as a Service anti-virus software lies in its uncontrolled search path. This allows attackers to escalate their privileges and execute arbitrary code within the SYSTEM context.

The vulnerability of the Data Loss Prevention module in Trend Micro’s anti-virus software programs Apex One and Apex One as a Service is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary co...

The vulnerability of the BuildEnterpriseSearchString method implemented by the PolicyServer server of the Trend Micro Endpoint Encryption (TMEE) encryption data solution allows a perpetrator to increase their privileges.

The vulnerability of the BuildEnterpriseSearchString method implemented by the PolicyServer server of the Trend Micro Endpoint Encryption TMEE encryption data solution is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability can allow an attacker...

The vulnerability of the User Interface Manager component in the Security Agent of Trend Micro’s anti-virus software products, Apex One and Apex One as a Service, allows a malicious actor to bypass existing security restrictions and execute arbitrary code.

The vulnerability of the User Interface Manager component in Trend Micro Apex One and Apex One as a Service anti-virus software programs relates to improper handling of user actions. Exploiting this vulnerability can allow attackers to bypass existing security restrictions and execute arbitrary...

The vulnerability of the Common Client Real-time Scan service of Trend Micro’s anti-virus software programs, Apex One and Apex One as a Service, allows attackers to escalate their privileges and execute arbitrary code within the SYSTEM context.

The vulnerability of Trend Micro Apex One and Apex One as a Service anti-virus software’s Common Client Real-time Scan function is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow attackers to enhance their privileges and execute...

The vulnerability of the User Interface Manager component in the Security Agent of Trend Micro’s anti-virus software products, Apex One and Apex One as a Service, allows a malicious actor to bypass existing security restrictions and execute arbitrary code.

The vulnerability of the User Interface Manager component in Trend Micro Apex One and Apex One as a Service anti-virus software programs relates to insecure privilege management. Exploiting this vulnerability can allow attackers to bypass existing security restrictions and execute arbitrary code...