CVE-2025-48926

The TeleMessage admin panel exposes sensitive user data like usernames, emails, passwords, and phone numbers to attackers. This information can be used for identity theft, fraud, or targeted attacks.

An authentication weakness in the TeleMessage admin panel (CWE-288: Authentication Using a Known Password) allows attackers to access and enumerate sensitive user credentials and contact information. The vulnerability affects all versions through 2025-05-05 and requires network access to the admin interface; successful exploitation results in disclosure of usernames, email addresses, passwords, and telephone numbers of platform users.