Firetruck

CVE-2025-48927

KEV
Updated Feb 26, 2026 · PUBLISHED
View KEV entry →

Description

TeleMessage TM SGNL contains an initialization of a resource with an insecure default vulnerability. This vulnerability relies on how the Spring Boot Actuator is configured with an exposed heap dump endpoint at a /heapdump URI.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
serviceTeleMessage / service>= 0, <= 2025-05-05affected