Trend Micro Apex One OS Command Injection Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 18/08/2025. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| apex one | = 2019 |
A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free