{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: TeleMessage vulnerabilities","home_page_url":"https://patchfirst.co/vendor/telemessage/","feed_url":"https://patchfirst.co/feed/vendor/telemessage.json","description":"New and newly exploited TeleMessage CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2025-48927#kev","url":"https://patchfirst.co/cve/CVE-2025-48927/","title":"[KEV] CVE-2025-48927: TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability","content_text":"TeleMessage · TM SGNL. In CISA KEV since 2025-07-01. ENISA EUVD lists it as exploited. EPSS 11.6% (higher than 96% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1212 Exploitation for Credential Access; T1005 Data from Local System; T1555 Credentials from Password Stores. Priority 60.9 of 100.","summary":"TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability","date_published":"2025-07-01T00:00:00.000Z","date_modified":"2026-06-17T09:30:29.000Z","tags":["kev","T1212","T1005","T1555"],"_patchfirst":{"reason":"kev","priority":60.9,"kev":{"dateAdded":"2025-07-01","ransomware":false},"epss":{"score":0.11567,"percentile":0.96029},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1"},"vendor":"TeleMessage","product":"TM SGNL","techniqueIds":["T1212","T1005","T1555"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2025-48928#kev","url":"https://patchfirst.co/cve/CVE-2025-48928/","title":"[KEV] CVE-2025-48928: TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability","content_text":"TeleMessage · TM SGNL. In CISA KEV since 2025-07-01. ENISA EUVD lists it as exploited. EPSS 0.6% (higher than 47.5% of CVEs). CVSS 4.0 MEDIUM. ATT&CK: T1212 Exploitation for Credential Access; T1005 Data from Local System; T1555 Credentials from Password Stores. Priority 50.3 of 100.","summary":"TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability","date_published":"2025-07-01T00:00:00.000Z","date_modified":"2026-06-17T09:30:30.000Z","tags":["kev","T1212","T1005","T1555"],"_patchfirst":{"reason":"kev","priority":50.3,"kev":{"dateAdded":"2025-07-01","ransomware":false},"epss":{"score":0.00577,"percentile":0.47534},"cvss":{"score":4,"severity":"MEDIUM","version":"3.1"},"vendor":"TeleMessage","product":"TM SGNL","techniqueIds":["T1212","T1005","T1555"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2025-48929","url":"https://patchfirst.co/cve/CVE-2025-48929/","title":"CVE-2025-48929: The TeleMessage service through 2025-05-05 implements authentication through a long-lived credential (e.g., not a…","content_text":"TeleMessage · service. Not in CISA KEV. EPSS 0.3% (higher than 26.5% of CVEs). CVSS 4.0 MEDIUM. Priority 43.1 of 100.","summary":"The TeleMessage service through 2025-05-05 implements authentication through a long-lived credential (e.g., not a…","date_published":"2025-05-28T00:00:00.000Z","date_modified":"2025-07-01T19:47:22.000Z","tags":[],"_patchfirst":{"reason":"published","priority":43.1,"kev":null,"epss":{"score":0.00333,"percentile":0.26523},"cvss":{"score":4,"severity":"MEDIUM","version":"3.1"},"vendor":"TeleMessage","product":"service","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2025-48925","url":"https://patchfirst.co/cve/CVE-2025-48925/","title":"CVE-2025-48925: The TeleMessage service through 2025-05-05 relies on the client side (e.g., the TM SGNL app) to do MD5 hashing, and…","content_text":"TeleMessage · service. Not in CISA KEV. EPSS 0.3% (higher than 19.9% of CVEs). CVSS 4.3 MEDIUM. Priority 42.0 of 100.","summary":"The TeleMessage service through 2025-05-05 relies on the client side (e.g., the TM SGNL app) to do MD5 hashing, and…","date_published":"2025-05-28T00:00:00.000Z","date_modified":"2025-07-01T19:48:30.000Z","tags":[],"_patchfirst":{"reason":"published","priority":42,"kev":null,"epss":{"score":0.00275,"percentile":0.19916},"cvss":{"score":4.3,"severity":"MEDIUM","version":"3.1"},"vendor":"TeleMessage","product":"service","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2025-48926","url":"https://patchfirst.co/cve/CVE-2025-48926/","title":"CVE-2025-48926: The admin panel in the TeleMessage service through 2025-05-05 allows attackers to discover usernames, e-mail…","content_text":"TeleMessage · service. Not in CISA KEV. EPSS 0.3% (higher than 18.4% of CVEs). CVSS 4.3 MEDIUM. Priority 41.7 of 100.","summary":"The admin panel in the TeleMessage service through 2025-05-05 allows attackers to discover usernames, e-mail…","date_published":"2025-05-28T00:00:00.000Z","date_modified":"2025-07-01T19:47:59.000Z","tags":[],"_patchfirst":{"reason":"published","priority":41.7,"kev":null,"epss":{"score":0.00265,"percentile":0.18449},"cvss":{"score":4.3,"severity":"MEDIUM","version":"3.1"},"vendor":"TeleMessage","product":"service","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2025-48930","url":"https://patchfirst.co/cve/CVE-2025-48930/","title":"CVE-2025-48930: The TeleMessage service through 2025-05-05 stores certain cleartext information in memory, even though memory content…","content_text":"TeleMessage · service. Not in CISA KEV. EPSS 0.1% (higher than 3.3% of CVEs). CVSS 2.8 LOW. Priority 37.6 of 100.","summary":"The TeleMessage service through 2025-05-05 stores certain cleartext information in memory, even though memory content…","date_published":"2025-05-28T00:00:00.000Z","date_modified":"2025-07-01T19:46:40.000Z","tags":[],"_patchfirst":{"reason":"published","priority":37.6,"kev":null,"epss":{"score":0.00139,"percentile":0.03286},"cvss":{"score":2.8,"severity":"LOW","version":"3.1"},"vendor":"TeleMessage","product":"service","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2025-47729#kev","url":"https://patchfirst.co/cve/CVE-2025-47729/","title":"[KEV] CVE-2025-47729: TeleMessage TM SGNL Hidden Functionality Vulnerability","content_text":"TeleMessage · TM SGNL. In CISA KEV since 2025-05-12. ENISA EUVD lists it as exploited. EPSS 0.4% (higher than 38.9% of CVEs). CVSS 4.9 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 49.2 of 100.","summary":"TeleMessage TM SGNL Hidden Functionality Vulnerability","date_published":"2025-05-12T00:00:00.000Z","date_modified":"2026-06-17T09:28:37.000Z","tags":["kev","T1190","T1005"],"_patchfirst":{"reason":"kev","priority":49.2,"kev":{"dateAdded":"2025-05-12","ransomware":false},"epss":{"score":0.00447,"percentile":0.38852},"cvss":{"score":4.9,"severity":"MEDIUM","version":"3.1"},"vendor":"TeleMessage","product":"TM SGNL","techniqueIds":["T1190","T1005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2025-47730","url":"https://patchfirst.co/cve/CVE-2025-47730/","title":"CVE-2025-47730: The TeleMessage archiving backend through 2025-05-05 accepts API calls (to request an authentication token) from the…","content_text":"TeleMessage · archiving backend. Not in CISA KEV. EPSS 0.4% (higher than 32.7% of CVEs). CVSS 4.8 MEDIUM. Priority 44.9 of 100.","summary":"The TeleMessage archiving backend through 2025-05-05 accepts API calls (to request an authentication token) from the…","date_published":"2025-05-08T00:00:00.000Z","date_modified":"2025-05-08T15:41:48.000Z","tags":[],"_patchfirst":{"reason":"published","priority":44.9,"kev":null,"epss":{"score":0.00386,"percentile":0.3269},"cvss":{"score":4.8,"severity":"MEDIUM","version":"3.1"},"vendor":"TeleMessage","product":"archiving backend","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}