THE BASE COLLECTIONCRDS / 0.1

CVE-2025-47729MEDIUM

TeleMessage

KNOWN EXPLOITED

collection

The archiving backend behind the TeleMessage messaging app (TM SGNL) keeps plain copies of user messages, which is not what the vendor's end-to-end encryption documentation describes. Exploited in the wild in May 2025.

CVSS

4.9

EPSS

PATCH

—

Retire the TeleMessage deployment; the archive holds plaintext the documentation said it would not, so treat every message it processed as disclosed.

SCRTY:CRDS / BASE SETREV. 01 ◆

Raw JSON

One vulnerability. The facts that matter.
A clear next move.

medium Known exploitedREV. 01

CVE-2025-47729TeleMessage — archive keeps messages in the clear

YOUR NEXT MOVE

Retire the TeleMessage deployment; the archive holds plaintext the documentation said it would not, so treat every message it processed as disclosed.

Read the risk

THE VITAL STATS

CVSS score: 4.9/ 10
EPSS probability: 0%
Attack complexity: Low
Known exploited: Yes — CISA KEV
CVE published: 2025-05-08
Added to KEV: 2025-05-12
Exploit published: Not recorded
Confidence: high
Kill chain: collection
MITRE ATT&CK: —
Severity: medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Attacker needsAccess to the archiving backend.

Behind the card

2 REFERENCES

Field-level provenanceTRACE THE SOURCES +

Which source supports each field, when it was retrieved, and who extracted it.

Fields	Source	Retrieved	Extractor	Confidence
cvss, exploitation.attack_complexity, exploitation.exploit_available, references, published_at	nvd.nist.gov	2026-09-24	scrty-crds-pipeline/0.1	high
exploitation.known_exploited, exploitation.kev_added	cisa.gov	2026-09-24	scrty-crds-pipeline/0.1	high
epss	api.first.org	2026-09-24	scrty-crds-pipeline/0.1	high
title, summary, severity, remediation, mitre_attack, kill_chain, recommended_action, confidence, tags, exploitation.prerequisites	nvd.nist.gov	2026-09-24	claude-code	high

Printing history

THE RECORD

r12026-09-24Initial base card

First printing. This card has not been reprinted since publication.