How severe is CVE-2025-47729?

CVE-2025-47729 has a CVSS 3.x base score of 1.9, rated low severity. It is exploitable over local access with high attack complexity, requires high privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability none.

Is CVE-2025-47729 being actively exploited?

Yes. CVE-2025-47729 is on CISA's Known Exploited Vulnerabilities (KEV) catalog, added on 2025-05-12, which means active exploitation has been confirmed. It should be prioritised for remediation.

What products are affected by CVE-2025-47729?

CVE-2025-47729 affects Telemessage Text Message Archiver. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2025-47729?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Because this CVE is known to be actively exploited, treat remediation as urgent — CISA KEV typically sets a short remediation deadline.

Does CVE-2025-47729 have an EU (EUVD) identifier?

Yes. CVE-2025-47729 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-14003. It is also flagged as exploited in the EUVD (since 2025-05-12).

When was CVE-2025-47729 published?

CVE-2025-47729 was published on 2025-05-08 and last updated on 2026-06-17.

CVE-2025-47729

CVE-2025-47729 is a low-severity vulnerability in Telemessage Text Message Archiver with a CVSS 3.x base score of 1.9. It is listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, confirming it has been exploited in the wild (added 2025-05-12). The underlying weakness is classified as CWE-912.

Key facts

Severity: Low (CVSS 3.x base score 1.9)
EPSS exploit prediction: 0% (33rd percentile)
Actively exploited: Yes — listed in CISA KEV (added 2025-05-12)
EU (EUVD) id: EUVD-2025-14003
EU exploitation: Flagged exploited in the ENISA EU Vulnerability Database (since 2025-05-12)
Weakness: CWE-912
Affected product: Telemessage Text Message Archiver
Published: 2025-05-08
Last modified: 2026-06-17

Description

The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functionality than described in the TeleMessage "End-to-End encryption from the mobile phone through to the corporate archive" documentation, as exploited in the wild in May 2025.

Frequently asked questions

What is CVE-2025-47729?: The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functionality than described in the TeleMessage "End-to-End encryption from the mobile phone through to the corporate archive" documentation, as exploited in the wild in May 2025.
How severe is CVE-2025-47729?: CVE-2025-47729 has a CVSS 3.x base score of 1.9, rated low severity. It is exploitable over local access with high attack complexity, requires high privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability none.
Is CVE-2025-47729 being actively exploited?: Yes. CVE-2025-47729 is on CISA's Known Exploited Vulnerabilities (KEV) catalog, added on 2025-05-12, which means active exploitation has been confirmed. It should be prioritised for remediation.
What products are affected by CVE-2025-47729?: CVE-2025-47729 affects Telemessage Text Message Archiver. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2025-47729?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Because this CVE is known to be actively exploited, treat remediation as urgent — CISA KEV typically sets a short remediation deadline.
Does CVE-2025-47729 have an EU (EUVD) identifier?: Yes. CVE-2025-47729 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-14003. It is also flagged as exploited in the EUVD (since 2025-05-12).
When was CVE-2025-47729 published?: CVE-2025-47729 was published on 2025-05-08 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:a:telemessage:text_message_archiver:*:*:*:*:*:*:*:*

Other CWE-912 vulnerabilities

CVE-2026-3587 — Critical (CVSS 10.0): An unauthenticated remote attacker can exploit a hidden function in the CLI prompt to escape the restricted interface,…
CVE-2024-39754 — Critical (CVSS 10.0): A static login vulnerability exists in the wctrls functionality of Wavlink AC3000 M33A8.V5030.210505. A specially…
CVE-2026-1952 — Critical (CVSS 9.8): Delta Electronics AS320T has denial of service via the undocumented subfunction vulnerability.
CVE-2026-33280 — Critical (CVSS 9.8): Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the…
CVE-2010-20103 — Critical (CVSS 9.8): A malicious backdoor was embedded in the official ProFTPD 1.3.3c source tarball distributed between November 28 and…
CVE-2024-45697 — Critical (CVSS 9.8): Certain models of D-Link wireless routers have a hidden functionality where the telnet service is enabled when the WAN…

Browse all CWE-912 vulnerabilities →