CISA Warns of Exploited Vulnerabilities in TeleMessage TM SGNL Platform

**Executive summary:** CISA has issued an urgent advisory for two actively exploited vulnerabilities in TeleMessage TM SGNL (CVE-2025-48927, CVE-2025-48928) that expose heap/core dumps—including potentially sensitive credentials—via an exposed /heapdump endpoint; the flaws are on CISA's KEV catalog with a federal remediation deadline and require immediate patching, configuration audits, and access restrictions.