The TeleMessage archiving backend through 2025-05-05 accepts API calls (to request an authentication token) from the TM SGNL (aka Archive Signal) app with the credentials of logfile for the user and enRR8UVVywXYbFkqU#QDPRkO for the password.
TeleMessage archiving backend vulnerabilities (CVE)
CVE records published for TeleMessage archiving backend, newest first. Follow to get an email when a new one appears.
4.8Medium
TeleMessage archiving backend
1.9Low
CVE-2025-47729
KEV
TeleMessage TM SGNL Hidden Functionality Vulnerability
TeleMessage archiving backend
The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functionality than described in the TeleMessage "End-to-End encryption from the mobile phone through to the…