Your RSA-2048 keys break in 2030. Find every one of them before attackers do.
🛡️
CISA KEV · ACTIVELY EXPLOITED
LOW severity

CVE-2025-47729 — Text Message Archiver

LOW

CVE-2025-47729 is a low-severity (CVSS 1.9) CWE-912 vulnerability in telemessage text message archiver. It is in CISA's Known Exploited Vulnerabilities catalog (added 2025-05-12) — treat it as actively exploited and patch now. No vendor fix is recorded yet; mitigation options are listed below.

The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functionality than described…

Published
Updated
Affected
1 product
Patched
See advisory
Exploits
None indexed
Exploitation data as of Oct 22, 2026 · OSV.dev, NVD, CISA KEV, FIRST.org (EPSS)

Exploitation Status

Actively exploited in the wild

  • Confirmed by CISA's Known Exploited Vulnerabilities catalog on 2025-05-12. Federal agencies were required to remediate by 2025-06-02.

Exploitation and automatability from CISA (KEV catalog and SSVC triage) for CVE-2025-47729.

EPSS Exploitation Probability

via FIRST.org ↗
0.4%probability of exploitation in next 30 days
Lower Risk+0.02%
Lower risk than most CVEs38th percentile — riskier than 38% of all scored CVEsHighest risk
0.00%1.76%3.52%5.27%4.1%0.4%May 26Sep 26Oct 26

Probability of exploitation in the next 30 days, from FIRST.org EPSS.

How urgent is this, really

CVE-2025-47729 by exploitation likelihood (EPSS) against impact (CVSS). Outside the shaded patch-first corner.

Where this sits among everything scored

Of 394,803 CVEs with a current EPSS score, this one falls in the < 10% band (highlighted). Counts from FIRST.org, log-scaled.

Description

The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functionality than described in the TeleMessage "End-to-End encryption from the mobile phone through to the corporate archive" documentation, as exploited in the wild in May 2025.

Affected Products

1 product · 1 configurations
Application
text message archivertelemessage
≤ 2025-05-05
range

Detection & mitigation playbook

Vendor / appliance

  1. Detect

    Inventory every telemessage text message archiver deployment and check each version against the affected-products list above.

  2. Remediation status

    No patch has shipped for CVE-2025-47729 yet — track the telemessage text message archiver advisory for a fixed release and apply the workarounds below in the meantime.

  3. Mitigate without a patch

    If you can't upgrade right away: gate or disable the affected feature, validate untrusted input at the boundary, and avoid passing attacker-controlled data into the vulnerable path. O3's runtime protection blocks exploitation in production as an interim safeguard until the upgrade lands. Alongside that, restrict the management interface to trusted networks and apply the vendor's recommended configuration mitigations.

Frequently Asked Questions

The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functionality than described in the TeleMessage "End-to-End encryption from the mobile phone through to the corporate archive" documentation, as exploited in the wild in May 2025.
O3 Security · Runtime Protection

Is CVE-2025-47729 being exploited in your environment?

Detect and block the exploit chain at execution, on systems you cannot patch yet.

Protect my workloads How runtime protection works
CVE-2025-47729: Text Message Archiver (Low 1.9, KEV)