Trend Micro Apex One OS Command Injection Vulnerability
Trend Micro · Apex One
Date added (CISA)
2025-08-18
Remediation due
2025-09-08
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Trend Micro Apex One Management Console (on-premise) contains an OS command injection vulnerability that could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.