CVE-2025-48927 TeleMessage TM SGNL Initialization of a Resource with an Insecure Default
Attackers can access exposed Spring Boot Actuator heap dumps to retrieve sensitive memory data from the TeleMessage service.
- Exploited in the wild
- Since 1 Jul 2025
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-48927?
CVE-2025-48927 is a medium-severity vulnerability in TeleMessage service, published on 28 May 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploited in the wild in May 2025.
Weakness: CWE-1188
Which versions are affected by CVE-2025-48927?
It affects 1 product.
Products include Smarsh Telemessage.
How do I fix CVE-2025-48927?
No fix has been published for CVE-2025-48927 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 22 Jul 2025.
Is CVE-2025-48927 being exploited?
Yes. Attackers have exploited CVE-2025-48927 in the wild since at least 1 Jul 2025.
Other vulnerabilities in TeleMessage service
Sources
Also known as GHSA-vg5q-95gg-rqfg.