CVE-2025-48928

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

It is recommended that mitigations be applied per vendor instructions if available. If these instructions cannot be located or if mitigations are unavailable, discontinue use of the product. ; https://nvd.nist.gov/vuln/detail/CVE-2025-48928

Remediation deadline: July 22, 2025

Description

TeleMessage TM SGNL contains an exposure of core dump file to an unauthorized control sphere Vulnerability. This vulnerability is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be included in this dump.

Timeline

Published:July 1st, 2025 12:00 AM

Last modified:July 1st, 2025 12:00 AM

Added to KEV:July 1st, 2025

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

TeleMessage

Products

TM SGNL

Weaknesses (CWE)

CWE-528

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute