CVE Watch—

CVE-2025-48927

TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability

CVSS

—

Sem CVSS

EPSS

12.2%

p96

KEV

SIM

1 de jul. de 2025

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

11.1%EPSS · 30 dias12.2%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

TeleMessage / TM SGNL

Vulnerabilidade

TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability

Adicionado ao KEV

1 de jul. de 2025

Corrigir até

22 de jul. de 2025

Uso conhecido em ransomware

Não

Descrição resumida

TeleMessage TM SGNL contains an initialization of a resource with an insecure default vulnerability. This vulnerability relies on how the Spring Boot Actuator is configured with an exposed heap dump endpoint at a /heapdump URI.

Ação necessária

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

It is recommended that mitigations be applied per vendor instructions if available. If these instructions cannot be located or if mitigations are unavailable, discontinue use of the product. ; https://nvd.nist.gov/vuln/detail/CVE-2025-48927

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2025-48928—

47.7%

KEV—64TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability—CVE-2025-47729—

39.0%

KEV—62TeleMessage TM SGNL Hidden Functionality Vulnerability—