ZDI-CAN-28556 HIGH 8.8 Overdue Dec 16, 2025

Signal

Signal is a widely-used encrypted messaging application known for providing end-to-end encrypted communications to millions of users globally. This high-severity vulnerability (CVSS 8.8) can be exploited remotely over the network without authentication, requiring only user interaction, and poses significant risks to confidentiality, integrity, and availability of affected systems. Security teams should monitor for exploitation attempts targeting Signal users and consider advising clients to update to patched versions once the vendor releases a fix by the April 2026 deadline.

Advisory Details
Researcher Discovered by: Kusol Watchara-Apanukorn
Reported December 16, 2025
Deadline April 15, 2026 2d overdue
CVSS Vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy