archiving backend vulnerabilities

2 known vulnerabilities in archiving backend from TeleMessage. 1 is rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  archiving backend: Use of Hard-coded Credentials

  CVE-2025-47730May 8, 2025TeleMessage

  The TeleMessage archiving backend through 2025-05-05 accepts API calls (to request an authentication token) from the TM SGNL (aka Archive Signal) app with the credentials of logfile for the user and enRR8UVVywXYbFkqU#QDPRkO for the password.

• 4.9 Medium severity

  TeleMessage TM SGNL Hidden Functionality Exploited

  CVE-2025-47729May 8, 2025TeleMessage

  The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functionality than described in the TeleMessage "End-to-End encryption from the mobile phone through to the