What’s Vulnerable › Vulnerabilities

CVE-2025-47729: TeleMessage TM SGNL Hidden Functionality Vulnerability

• Severity: medium (CVSS 4.9 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2025-05-12
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-05-08 · updated 2026-06-17
• Weakness: CWE-912

Description

The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functionality than described in the TeleMessage "End-to-End encryption from the mobile phone through to the corporate archive" documentation, as exploited in the wild in May 2025.

Affected products

• TeleMessage Text Message Archiver: through 2025-05-05

References

• https://arstechnica.com/security/2025/05/signal-clone-used-by-trump-official-stops-operations-after-report-it-was-hacked/
• https://news.ycombinator.com/item?id=43909220
• https://www.theregister.com/2025/05/05/telemessage_investigating/
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-47729

Get alerted when CVE-2025-47729 or the next vulnerability affects your stack