Unrated severityCISA KEVNVD Advisory· Published May 8, 2025· Updated Oct 21, 2025

CVE-2025-47729

Description

The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functionality than described in the TeleMessage "End-to-End encryption from the mobile phone through to the corporate archive" documentation, as exploited in the wild in May 2025.

Affected products

Telemessage/Archiving Backendv5
Range: 0

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

arstechnica.com/security/2025/05/signal-clone-used-by-trump-official-stops-operations-after-report-it-was-hacked/mitre
news.ycombinator.com/itemmitre
www.theregister.com/2025/05/05/telemessage_investigating/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.120
patch	0.000
ransomware	0.000