Patchfirst: TeleMessage vulnerabilitieshttps://patchfirst.co/vendor/telemessage/New and newly exploited TeleMessage CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMT[KEV] CVE-2025-48927: TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerabilityhttps://patchfirst.co/cve/CVE-2025-48927/CVE-2025-48927#kevTue, 01 Jul 2025 00:00:00 GMTTeleMessage · TM SGNL. In CISA KEV since 2025-07-01. ENISA EUVD lists it as exploited. EPSS 11.6% (higher than 96% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1212 Exploitation for Credential Access; T1005 Data from Local System; T1555 Credentials from Password Stores. Priority 60.9 of 100.kevT1212T1005T1555[KEV] CVE-2025-48928: TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerabilityhttps://patchfirst.co/cve/CVE-2025-48928/CVE-2025-48928#kevTue, 01 Jul 2025 00:00:00 GMTTeleMessage · TM SGNL. In CISA KEV since 2025-07-01. ENISA EUVD lists it as exploited. EPSS 0.6% (higher than 47.5% of CVEs). CVSS 4.0 MEDIUM. ATT&CK: T1212 Exploitation for Credential Access; T1005 Data from Local System; T1555 Credentials from Password Stores. Priority 50.3 of 100.kevT1212T1005T1555CVE-2025-48929: The TeleMessage service through 2025-05-05 implements authentication through a long-lived credential (e.g., not a…https://patchfirst.co/cve/CVE-2025-48929/CVE-2025-48929Wed, 28 May 2025 00:00:00 GMTTeleMessage · service. Not in CISA KEV. EPSS 0.3% (higher than 26.5% of CVEs). CVSS 4.0 MEDIUM. Priority 43.1 of 100.CVE-2025-48925: The TeleMessage service through 2025-05-05 relies on the client side (e.g., the TM SGNL app) to do MD5 hashing, and…https://patchfirst.co/cve/CVE-2025-48925/CVE-2025-48925Wed, 28 May 2025 00:00:00 GMTTeleMessage · service. Not in CISA KEV. EPSS 0.3% (higher than 19.9% of CVEs). CVSS 4.3 MEDIUM. Priority 42.0 of 100.CVE-2025-48926: The admin panel in the TeleMessage service through 2025-05-05 allows attackers to discover usernames, e-mail…https://patchfirst.co/cve/CVE-2025-48926/CVE-2025-48926Wed, 28 May 2025 00:00:00 GMTTeleMessage · service. Not in CISA KEV. EPSS 0.3% (higher than 18.4% of CVEs). CVSS 4.3 MEDIUM. Priority 41.7 of 100.CVE-2025-48930: The TeleMessage service through 2025-05-05 stores certain cleartext information in memory, even though memory content…https://patchfirst.co/cve/CVE-2025-48930/CVE-2025-48930Wed, 28 May 2025 00:00:00 GMTTeleMessage · service. Not in CISA KEV. EPSS 0.1% (higher than 3.3% of CVEs). CVSS 2.8 LOW. Priority 37.6 of 100.[KEV] CVE-2025-47729: TeleMessage TM SGNL Hidden Functionality Vulnerabilityhttps://patchfirst.co/cve/CVE-2025-47729/CVE-2025-47729#kevMon, 12 May 2025 00:00:00 GMTTeleMessage · TM SGNL. In CISA KEV since 2025-05-12. ENISA EUVD lists it as exploited. EPSS 0.4% (higher than 38.9% of CVEs). CVSS 4.9 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 49.2 of 100.kevT1190T1005CVE-2025-47730: The TeleMessage archiving backend through 2025-05-05 accepts API calls (to request an authentication token) from the…https://patchfirst.co/cve/CVE-2025-47730/CVE-2025-47730Thu, 08 May 2025 00:00:00 GMTTeleMessage · archiving backend. Not in CISA KEV. EPSS 0.4% (higher than 32.7% of CVEs). CVSS 4.8 MEDIUM. Priority 44.9 of 100.