Authentication Flaw in TeleMessage Service Affects TM SGNL App

CVE-2025-48925

What is CVE-2025-48925?

The TeleMessage service, specifically the TM SGNL application, has a vulnerability that allows attackers to exploit client-side MD5 hashing used for authentication. By relying solely on this method, the service accepts the hash as a security credential, making it susceptible to unauthorized access. This flaw was actively exploited in May 2025, raising significant concerns about user data safety and compromise.

References