CyberSec.Space Logo
Back to CVE Browser

CVE-2025-47729

🔥 Known Exploited (CISA KEV)LOW
1.9
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2025-05-08
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functionality than described in the TeleMessage "End-to-End encryption from the mobile phone through to the corporate archive" documentation, as exploited in the wild in May 2025.

Affected Platforms (CPE)

📦
Telemessage

Text Message Archiver

<= 2025-05-05

References & Advisories

🔗 https://arstechnica.com/security/2025/05/signal-clone-used-by-trump-official-stops-operations-after-report-it-was-hacked/
🔗 https://news.ycombinator.com/item?id=43909220
🔗 https://www.theregister.com/2025/05/05/telemessage_investigating/
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-47729

Related Vulnerabilities

CVE-2026-64527

In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate VMBus packet size in receive callback h...

CVE-2026-64487

In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4...

CVE-2026-644509.1

In the Linux kernel, the following vulnerability has been resolved: tipc: fix out-of-bounds read in broadcast Gap ACK blocks A b...

CVE-2026-644488.2

In the Linux kernel, the following vulnerability has been resolved: smb: client: restrict implied bcc[0] exemption to responses w...