Unrated severityCISA KEVNVD Advisory· Published May 8, 2025· Updated Oct 21, 2025

CVE-2025-47729

Description

The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functionality than described in the TeleMessage "End-to-End encryption from the mobile phone through to the corporate archive" documentation, as exploited in the wild in May 2025.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Telemessage/Archiving Backendllm-fuzzy2 versions
<= 2025-05-05+ 1 more
- (no CPE)range: <= 2025-05-05
- (no CPE)range: 0
Telemessage/TeleMessage servicellm-fuzzy

Patches

Vulnerability mechanics

References

arstechnica.com/security/2025/05/signal-clone-used-by-trump-official-stops-operations-after-report-it-was-hacked/mitre
news.ycombinator.com/itemmitre
www.theregister.com/2025/05/05/telemessage_investigating/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.120
patch	0.000
ransomware	0.000