TeleMessage archiving backend vulnerabilities (CVE)

CVE records published for TeleMessage archiving backend, newest first. Follow to get an email when a new one appears.

2 results
4.8Medium
CVE-2025-47730
TeleMessage archiving backend

The TeleMessage archiving backend through 2025-05-05 accepts API calls (to request an authentication token) from the TM SGNL (aka Archive Signal) app with the credentials of logfile for the user and enRR8UVVywXYbFkqU#QDPRkO for the password.

1.9Low
CVE-2025-47729 KEV

TeleMessage TM SGNL Hidden Functionality Vulnerability

TeleMessage archiving backend

The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functionality than described in the TeleMessage "End-to-End encryption from the mobile phone through to the…