Browse / CVEs / CVE-2025-48928
CVE-2025-48928· telemessage / tm sgnl· CWE-528
TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability
Exploited in the wild. Listed by CISA on 2025-07-01; known to be used by ransomware.
0.6%likelihood of exploitation, next 30 days
48%of all CVEs are less likely
Nonecheck to confirm it
TeleMessage TM SGNL contains an exposure of core dump file to an unauthorized control sphere Vulnerability. This vulnerability is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be included in this dump.
No ready check is stored for this CVE. Confirm it by hand from the references.
References
Use this check only on systems you are authorised to test. Where the data comes from