Do Son A critical RCE flaw in Trend Micro Apex One has been added to CISA's KEV Catalog due to active exploitation. All agencies must patch by September 8.
CVE-2025-54948
Trend Micro warns of two critical RCE flaws (CVE-2025-54948, -54987) in Apex One (on-prem) actively exploited in the wild. A fix tool is available, but disables remote agent installs.