ZeusQA
Start free

Known exploited vulnerabilities

TeleMessage vulnerabilities attackers have used

Every TeleMessage vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 3 TeleMessage vulnerabilities as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2025-48928, added Jul 1, 2025. TM SGNL has the most entries (3).

In KEV, all time
3
Added, last 12 months
0
Used in ransomware
0
New CVEs this week
0

Every TeleMessage entry in CISA KEV

  1. CVE-2025-48928

    Added · due

    TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability

    TeleMessage TM SGNL contains an exposure of core dump file to an unauthorized control sphere Vulnerability. This vulnerability is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a…

  2. CVE-2025-48927

    Added · due

    TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability

    TeleMessage TM SGNL contains an initialization of a resource with an insecure default vulnerability. This vulnerability relies on how the Spring Boot Actuator is configured with an exposed heap dump endpoint at a /heapdump URI.

  3. CVE-2025-47729

    Added · due

    TeleMessage TM SGNL Hidden Functionality Vulnerability

    TeleMessage TM SGNL contains a hidden functionality vulnerability in which the archiving backend holds cleartext copies of messages from TM SGNL application users.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works