https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:59:38 +0000 https://cve.radiocsirt.org/vuln/2025-0805-tm-a1-002 <p>ITW CRITICAL SECURITY BULLETIN: Trend Micro Apex One (On-Premise) Management Console Command Injection RCE Vulnerabilities</p> <p>ITW CRITICAL SECURITY BULLETIN: Trend Micro Apex One (On-Premise) Management Console Command Injection RCE Vulnerabilities</p> https://cve.radiocsirt.org/vuln/2025-0805-tm-a1-002 https://cve.radiocsirt.org/vuln/bdu:2025-09573 bdu:2025-09573 https://cve.radiocsirt.org/vuln/bdu:2025-09573 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0658 certfr-2025-avi-0658 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0658 https://cve.radiocsirt.org/vuln/euvd-2026-272530 EUVD-2026-272530 https://cve.radiocsirt.org/vuln/euvd-2026-272530 https://cve.radiocsirt.org/vuln/fkie_cve-2025-54987 <p>A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is essentially the same as CVE-2025-54948 but targets a different CPU architecture.</p> <p>A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is essentially the same as CVE-2025-54948 but targets a different CPU architecture.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-54987 https://cve.radiocsirt.org/vuln/ghsa-8q59-7jj3-fj58 <p>A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is essentially the same as CVE-2025-54948 but targets a different CPU architecture.</p> <p>A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is essentially the same as CVE-2025-54948 but targets a different CPU architecture.</p> https://cve.radiocsirt.org/vuln/ghsa-8q59-7jj3-fj58 https://cve.radiocsirt.org/vuln/jvndb-2025-010854 <p>Trend Micro Endpoint security products for enterprises contain the following vulnerabilities. &lt;ul&gt;&lt;li&gt;OS command injection vulnerability in the management console (CWE-78) - CVE-2025-54948, CVE-2025-54987&lt;/li&gt;&lt;/ul&gt; Trend Micro Incorporated has reported that attacks exploiting CVE-2025-54948 have been observed in the wild. Trend Micro Incorporated reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.</p> <p>Trend Micro Endpoint security products for enterprises contain the following vulnerabilities. &lt;ul&gt;&lt;li&gt;OS command injection vulnerability in the management console (CWE-78) - CVE-2025-54948, CVE-2025-54987&lt;/li&gt;&lt;/ul&gt; Trend Micro Incorporated has reported that attacks exploiting CVE-2025-54948 have been observed in the wild. Trend Micro Incorporated reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.</p> https://cve.radiocsirt.org/vuln/jvndb-2025-010854 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1727 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Trend Micro Apex One ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Trend Micro Apex One ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1727