TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 01/07/2025. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| TM SGNL | Versions not published yet (product named by CISA KEV) | |
The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be included in this dump, as exploited in the wild in May 2025.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free