[ Vendor · 3 CVEs ]
TeleMessage
CVEs affecting TeleMessage published in the last 30 days, plus any TeleMessage CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2025-48928 | 28 May 2025 | CVSS 4.0 | TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control SphereThe TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a… | Exploited |
| CVE-2025-48927 | 28 May 2025 | CVSS 5.3 | TeleMessage TM SGNL Initialization of a Resource with an Insecure DefaultThe TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploited in the… | Exploited |
| CVE-2025-47729 | 8 May 2025 | CVSS 4.9 | TeleMessage TM SGNL Hidden FunctionalityThe TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is… | Exploited |