← Global Threat Landscape

CVE-2025-47729

CWE-912

Informational

27.9

RPS

Description

The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functionality than described in the TeleMessage "End-to-End encryption from the mobile phone through to the corporate archive" documentation, as exploited in the wild in May 2025.

Source: NVD

Signals

CVSS
1.9
Low · v3.1
EPSS
0.44%
Probability of exploitation in the next 30 days (FIRST)
CISA KEV
In CISA KEV since May 2025
Fix commit
No known fix commit
Sources: MoreFixes, FreshFixes
Weakness
CWE-912
Published
8 May 2025
Last modified 5 Nov 2025

How to read these signals: RPS · EPSS · CISA KEV · Data sources

Get this score from the API

curl -H "Authorization: Bearer dsec_live_xxxxxxxx" \
  https://api.intelligence.devsecure.io/api/v1/rps/CVE-2025-47729

Replace the placeholder with your key. Get a free API key or rank your own CVEs.

Data as of 7 Oct 2026, 05:16 UK time

CVE-2025-47729 · RPS 27.9 · DevSecure Intelligence