Skip to main content

CISA updates Known Exploited Vulnerabilities Catalog with CVE-2025-54948

Source Decision Insights Coverage Published August 20, 2025 Companies 3
Human View Machine View

3 companies named across 7 categories, one of 4 articles referencing Trend Micro. Previous coverage: CISA Weekly Intelligence Brief on Security Alerts and Vulnerabilities - Week of August 18, 2025 (Aug 2025).

Companies mentioned

Best suited for

Persona
Security Operations Leader
Decision stage
Which to buy
Adoption curve
Early Majority

Our classification, not the publisher's statement. Best suited for, not only for.

CISA has updated its Known Exploited Vulnerabilities (KEV) Catalog by including a new vulnerability based on evidence of active exploitation. This addition is crucial for IT decision-makers as it highlights ongoing risks in the cybersecurity landscape.

New Vulnerability Entry

The recently added vulnerability is identified as CVE-2025-54948, which is associated with the Trend Micro Apex One Operating System (OS) Command Injection. Such vulnerabilities are known attack vectors for cybercriminals, presenting substantial risks to governmental networks.

Regulatory Context

The Binding Operational Directive (BOD) 22-01 established the KEV Catalog as an essential resource for identifying significant Common Vulnerabilities and Exposures (CVE) (CVEs). This directive mandates that Federal Civilian Executive Branch agencies remediate identified vulnerabilities promptly to safeguard their networks from active threats.

Broader Recommendations

While BOD 22-01 specifically applies to Federal Civilian Executive Branch agencies, CISA encourages all organizations to prioritize the remediation of KEV Catalog vulnerabilities. Timely addressing these issues is a recommended practice within vulnerability management frameworks.

This update serves as a timely reminder for organizations to stay vigilant regarding cybersecurity threats and to take action against known vulnerabilities. This summary reflects a fact-based overview of the original blog post regarding the new entry into CISA's vulnerability catalog.

Blog post, originally published by Summary by StringerAI - Source: Cybersecurity and Infrastructure Security Agency (CISA) at decisioninsights.ai.

Mentions

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/cisa-updates-known-exploited-vulnerabilities-catalog-with-cve-2025-54948/",
        "name": "CISA updates Known Exploited Vulnerabilities Catalog with CVE-2025-54948",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/cisa-updates-known-exploited-vulnerabilities-catalog-with-cve-2025-54948/#blogposting",
    "@type": "BlogPosting",
    "about": {
      "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
      "name": "Department of Homeland Security"
    },
    "articleSection": [
      "Cybersecurity"
    ],
    "audience": [
      {
        "@type": "Audience",
        "additionalType": "Persona",
        "audienceType": "Security Operations Leader"
      },
      {
        "@type": "Audience",
        "additionalType": "Adoption curve",
        "audienceType": "Early Majority"
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-coverage/#person",
      "@type": "Person",
      "name": "Decision Insights Coverage",
      "url": "https://decisioninsights.ai/author/decision-insights-coverage/"
    },
    "dateModified": "2026-08-23T13:04:42-06:00",
    "datePublished": "2025-08-20T15:44:57-06:00",
    "description": "CISA updates its Known Exploited Vulnerabilities Catalog, adding CVE-2025-54948 due to active exploitation risks.",
    "headline": "CISA updates Known Exploited Vulnerabilities Catalog with CVE-2025-54948",
    "isBasedOn": {
      "@type": "CreativeWork",
      "author": {
        "@type": "Person",
        "name": "Summary by StringerAI - Source: Cybersecurity and Infrastructure Security Agency (CISA)"
      },
      "url": "https://decisioninsights.ai/advisory/cisa-adds-cve-2025-54948-to-known-exploited-vulnerabilities-catalog/2025/08/"
    },
    "keywords": [
      "Binding Operational Directive",
      "Common Vulnerabilities and Exposures",
      "Known Exploited Vulnerabilities",
      "Operating System",
      "Threats",
      "Vulnerabilities"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/cisa-updates-known-exploited-vulnerabilities-catalog-with-cve-2025-54948/",
      "@type": "WebPage",
      "sdDatePublished": "2026-08-23",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/",
        "name": "Cybersecurity and Infrastructure Security Agency (CISA)"
      },
      {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
        "name": "Department of Homeland Security"
      },
      {
        "@id": "https://decisioninsights.ai/registry/trend-micro/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/trend-micro/",
        "name": "Trend Micro"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-coverage/#person",
    "@type": "Person",
    "description": "Blog posts, podcasts, and video analysis from across the industry, condensed into short, sourced summaries. Produced under our Standards & Methodology.",
    "name": "Decision Insights Coverage",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-coverage/"
  }
]

Is this your company? Get structured data for your own pages