Exploited Vulnerabilities DailyCVE-2025-48927: TeleMessage TM SGNL
EPSS11.1%No. 1248 of 1739 in KEV
CVE year2025listed the same year
Same vendor in KEV3
Same product3
| Field | Value |
|---|---|
| Vendor | TeleMessage |
| Product | TM SGNL |
| Name | TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability |
| Added to KEV | 2025-07-01 |
| US federal due date | 2025-07-22 |
| Ransomware use | Unknown |
| CWE | CWE-1188 |
CISA description
TeleMessage TM SGNL contains an initialization of a resource with an insecure default vulnerability. This vulnerability relies on how the Spring Boot Actuator is configured with an exposed heap dump endpoint at a /heapdump URI.
Other entries for this product
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2025-48928 | TeleMessage TM SGNL | 2025-07-01 | 0.5% | Unknown |
| CVE-2025-47729 | TeleMessage TM SGNL | 2025-05-12 | 0.4% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A TeleMessage TM SGNL vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2025-07-01.