Firetruck

CVE-2025-48928

KEV
Updated Feb 26, 2026 · PUBLISHED
View KEV entry →

Description

TeleMessage TM SGNL contains an exposure of core dump file to an unauthorized control sphere Vulnerability. This vulnerability is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be included in this dump.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
serviceTeleMessage / service>= 0, <= 2025-05-05affected