Live › vulnerability › CVE-2025-47729
Go to dashboardTeleMessage TM SGNL is a hosted archiving service for Signal-style messages, and its archiving backend stores cleartext copies of users' messages. An attacker who gets into that backend can read message content that users expected to be end-to-end encrypted.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| TeleMessage TM SGNL | vendor | – | – |
| telemessage text message archiver | vendor | <= 2025-05-05 | – |
Check whether your organization uses TeleMessage TM SGNL for message archiving or on any device that runs the TM SGNL app.
Apply the mitigations from the vendor, or discontinue use of TM SGNL if mitigations are unavailable, per the CISA required action.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
TeleMessage TM SGNL contains a hidden functionality vulnerability in which the archiving backend holds cleartext copies of messages from TM SGNL application users.
CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
This page as .md · .json · in your agent: get_signal("CVE-2025-47729")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.