BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more
← CVE Radar

CVE-2025-48928TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability

The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be included in this dump, as exploited in the wild in May 2025.

4.0 MEDIUMEPSS 0.57%⚡ Known Exploited (CISA KEV)NVD: Analyzed

OverviewAffected ProductsReferences
NVD CVE.org

Overview

Severity

ScoreSeverityVersionVector String
4.0MEDIUM3.1mitre (CNA)CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA required action

⚡ Known exploited · remediation due Jul 22, 2025

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Details

CVE ID
CVE-2025-48928
Status
Analyzed
Assigner (CNA)
mitre
Published
May 28, 2025
Last modified
2026-06-17 09:30 UTC
Weaknesses
  • CWE-528 · Exposure of Core Dump File to an Unauthorized Control Sphere
  • CWE-552

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 11:30 UTC.