CVE-2025-47729

Published: May 8, 2025Modified: Jun 17, 2026CISA KEV

4.9

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.2 / Impact: 3.6

Source: NVD

Description

The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functionality than described in the TeleMessage "End-to-End encryption from the mobile phone through to the corporate archive" documentation, as exploited in the wild in May 2025.

Affected (1)

Products: Telemessage: Text Message Archiver

1 product

Text Message Archiver

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Telemessage Text Message Archiver	Up to 2025-05-05

Related CWEs

Hidden Functionality

The product contains functionality that is not documented, not part of the specification, and not accessible through an interface or command sequence that is obvious to the product's users or administrators.

References (4)

https://arstechnica.com/security/2025/05/signal-clone-used-by-trump-official-stops-operations-after-report-it-was-hacked/

Source: cve@mitre.org

Press/Media Coverage

https://news.ycombinator.com/item?id=43909220

Source: cve@mitre.org

Press/Media Coverage

https://www.theregister.com/2025/05/05/telemessage_investigating/

Source: cve@mitre.org

Press/Media Coverage

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-47729

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource

Timeline

No history available yet.