CRITICALExploited in the wildUnknown

TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability

It is recommended that mitigations be applied per vendor instructions if available. If these instructions cannot be located or if mitigations are unavailable, discontinue use of the product. ; https://nvd.nist.gov/vuln/detail/CVE-2025-48927

CVE-2025-48927Published 1 year agoSource: CISA KEV

Affected packages

No package-level mapping for this advisory.

Exploit signal

Known exploited (CISA KEV)
Yes
EPSS score
8.66%
EPSS percentile
94.6%

EPSS is the probability a CVE is exploited in the wild; percentile is its rank among all CVEs. This advisory is in the top 95%.

Sources

No external sources available.

Recommended response stack

SnykScan your dependencies in CI and fix this vulnerability.SocketDetect malicious and compromised packages before they ship.

Some links are affiliate links — HackTribune may earn a commission at no extra cost to you.

Get incidents like this as alerts for your stack.

Join the beta
TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability | HackTribune