TeleMessage vulnerabilities
9 published CVEs name TeleMessage among the affected products; CISA lists 3 of them as exploited in the wild.
- 9Published CVEs9 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 3Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2025-48927
The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploited in the wild in…
TeleMessage · service
ExploitedMedium5.3 - CVE-2025-48928
The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password…
TeleMessage · service
ExploitedMedium4.0 - CVE-2025-47729
The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different…
TeleMessage · archiving backend
ExploitedLow1.9