CVE-2025-48928: Tele Message TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability
TeleMessage TM SGNL contains an exposure of core dump file to an unauthorized control sphere Vulnerability. This vulnerability is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be included in this dump.
Read the original at CISA KEV Catalog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2025-48928TeleMessage
- Related
- CVE-2025-48927: Tele Message TM SGNL Initialization of a Resource with an Insecure Default Vulnerability Known Exploited Vulnerabilities · Jul 01, 2025CVE-2025-47729: Tele Message TM SGNL Hidden Functionality Vulnerability Known Exploited Vulnerabilities · May 12, 2025Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026