{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T20:45:43.249Z",
  "tag": {
    "id": "trend-micro",
    "label": "Trend Micro",
    "isStack": false,
    "url": "https://pwn.watch/t/trend-micro",
    "feed": "https://pwn.watch/t/trend-micro/feed.xml"
  },
  "counts": {
    "incidents": 2,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 2
  },
  "incidents": [
    {
      "slug": "trend-micro-apex-one-cve-2025-54948",
      "title": "Trend Micro Apex One: Apex One OS Command Injection Vulnerability",
      "url": "https://pwn.watch/i/trend-micro-apex-one-cve-2025-54948",
      "json": "https://pwn.watch/i/trend-micro-apex-one-cve-2025-54948.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Trend Micro Apex One",
      "tags": [
        "trend-micro",
        "cisa-kev",
        "rce"
      ],
      "cveIds": [
        "CVE-2025-54948"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-08-18",
      "closedAt": "2025-08-18",
      "updatedAt": "2025-08-18",
      "summary": "Trend Micro Apex One Management Console (on-premise) contains an OS command injection vulnerability that could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. Added to CISA KEV on 2025-08-18.",
      "xPost": null
    },
    {
      "slug": "trend-micro-apex-one-and-worry-free-business-cve-2023-41179",
      "title": "Trend Micro Apex One and Worry-Free Business Security: Remote Code Execution (CVE-2023-41179)",
      "url": "https://pwn.watch/i/trend-micro-apex-one-and-worry-free-business-cve-2023-41179",
      "json": "https://pwn.watch/i/trend-micro-apex-one-and-worry-free-business-cve-2023-41179.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Trend Micro Apex One and Worry-Free Business Security",
      "tags": [
        "trend-micro",
        "cisa-kev",
        "rce"
      ],
      "cveIds": [
        "CVE-2023-41179"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-09-21",
      "closedAt": "2023-09-21",
      "updatedAt": "2023-09-21",
      "summary": "Trend Micro Apex One and Worry-Free Business Security contain an unspecified vulnerability in the third-party anti-virus uninstaller that could allow an attacker to manipulate the module to conduct remote code execution. An attacker must first obtain administrative console access on the target system in order to exploit this vulnerability. Added to CISA KEV on 2023-09-21.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "trend-micro-apex-one-cve-2025-54948",
      "incidentTitle": "Trend Micro Apex One: Apex One OS Command Injection Vulnerability",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-08-18",
      "title": "CISA added CVE-2025-54948 to the KEV catalog (due 2025-09-08).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/trend-micro-apex-one-cve-2025-54948"
    },
    {
      "incident": "trend-micro-apex-one-and-worry-free-business-cve-2023-41179",
      "incidentTitle": "Trend Micro Apex One and Worry-Free Business Security: Remote Code Execution (CVE-2023-41179)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-09-21",
      "title": "CISA added CVE-2023-41179 to the KEV catalog (due 2023-10-12).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/trend-micro-apex-one-and-worry-free-business-cve-2023-41179"
    }
  ]
}