The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages…
Priority HIGH 80Exploited in the wildCWE-912Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functionality than described in the TeleMessage "End-to-End encryption from the mobile phone through to the corporate archive" documentation, as exploited in the wild in May 2025.
Why it matters now
Exploitation Active In CISA KEV since 2025-05-12CISA due date 2025-06-02
EPSS 0.00447 39th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Active
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| TeleMessage | archiving backend | up to 2025-05-05 | — | No fix listed | CNA |
- archiving backend VendorTeleMessage Affected up to 2025-05-05 Fixed in — No fix listed CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:telemessage:text_message_archiver:*:*:*:*:*:*:*:* | up to 2025-05-05 | Vulnerable | TeleMessage |
- cpe:2.3:a:telemessage:text_message_archiver:*:*:*:*:*:*:*:* Versions up to 2025-05-05 Vulnerable ·TeleMessage
Remediation
No fixed version listed by the sources yet.
Timeline
- 2025-05-12 Added to CISA KEV
- 2026-10-02 Threatist record created from CVE-2025-47729
- 2026-10-03 Alias added: GHSA-h5qv-qcjq-wcff
References
Sources
- CVE-2025-47729 · CVE Program
- CVE-2025-47729 · NVD
- CISA Known Exploited Vulnerabilities
- FIRST EPSS
- GHSA-h5qv-qcjq-wcff · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences