https://vulnerability.circl.lu/sightings/feed 2026-10-11T23:10:28.978071+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/bb857e4b-2f81-47f8-b04d-986eb8b03d7b/export 2026-10-11T23:10:29.000840+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "bb857e4b-2f81-47f8-b04d-986eb8b03d7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107181", "type": "seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mxlhr5nzfk2v", "content": "Vuln\u00e9rabilit\u00e9s \u00e9lev\u00e9es (7 \u2264 CVSS < 9) \u00b7 1\n\u2022 Telegram Desktop (CVE-2026-107181), CVSS 8.6 (Numerama)", "creation_timestamp": "2026-10-11T07:21:32.158222Z"} 2026-10-11T07:21:32.158222+00:00 https://vulnerability.circl.lu/sighting/7497bd5a-ad3b-4f0f-b031-2e246bd5cb38/export 2026-10-11T23:10:29.003079+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7497bd5a-ad3b-4f0f-b031-2e246bd5cb38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107181", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxkeodekgv2n", "content": "\ud83e\udd16 CVE-2026-107181 (CVSS 8.1): Telegram Desktop's IPC fails to escape its ';' separator. A crafted tg:// link injects an OPEN: cmd reaching internal interpret: URI \u2192 arbitrary file read, session theft, ATO.\nhttps://beaksec.github.io/posts/telegram-desktop-one-click-account-takeover/", "creation_timestamp": "2026-10-10T20:53:36.514237Z"} 2026-10-10T20:53:36.514237+00:00 https://vulnerability.circl.lu/sighting/11cae2df-c932-4e10-b8ba-7792c0102695/export 2026-10-11T23:10:29.003169+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "11cae2df-c932-4e10-b8ba-7792c0102695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107181", "type": "published-proof-of-concept", "source": "https://t.me/ViralCyber/26659", "content": "\ud83d\udfe8\u06a9\u0634\u0641 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u062f\u0631 \u062a\u0644\u06af\u0631\u0627\u0645 \u062f\u0633\u06a9\u062a\u0627\u067e\u061b \u0633\u0631\u0642\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0648 \u062a\u0635\u0627\u062d\u0628 \u062d\u0633\u0627\u0628 \u06a9\u0627\u0631\u0628\u0631\u06cc \u062a\u0646\u0647\u0627 \u0628\u0627 \u06cc\u06a9 \u06a9\u0644\u06cc\u06a9!\n\u25c0\ufe0f\u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u062f\u062a \u0628\u0627\u0644\u0627 \u062f\u0631 \u0646\u0633\u062e\u0647 \u062f\u0633\u06a9\u062a\u0627\u067e \u062a\u0644\u06af\u0631\u0627\u0645 \u06a9\u0634\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0646\u0647\u0627 \u0628\u0627 \u0641\u0631\u06cc\u0628 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0631\u0627\u06cc \u06a9\u0644\u06cc\u06a9 \u0631\u0648\u06cc \u06cc\u06a9 \u0644\u06cc\u0646\u06a9 \u0645\u062e\u0631\u0628\u060c \u0641\u0627\u06cc\u0644\u200c\u0647\u0627 \u0648 \u0627\u0637\u0644\u0627\u0639\u0627\u062a Session \u062a\u0644\u06af\u0631\u0627\u0645 \u0631\u0627 \u0633\u0631\u0642\u062a \u06a9\u0646\u0646\u062f.\n\n\ud83d\udd0e \u0645\u0634\u062e\u0635\u0627\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc:\n\u2b05\u0634\u0646\u0627\u0633\u0647: CVE-2026-107181\n\u2b05 \u0634\u062f\u062a: High\n\u2b05\u0627\u0645\u062a\u06cc\u0627\u0632 : 8.6\n\u2b05 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631: Telegram Desktop \u0642\u0628\u0644 \u0627\u0632 7.2.9\n\u2b05\u0648\u0636\u0639\u06cc\u062a: \u0627\u0646\u062a\u0634\u0627\u0631 \u0639\u0645\u0648\u0645\u06cc PoC \u0648 \u0627\u0631\u0627\u0626\u0647 \u0648\u0635\u0644\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc\n\n\ud83d\udea8 \u062e\u0637\u0631\u0646\u0627\u06a9\u200c\u062a\u0631\u06cc\u0646 \u067e\u06cc\u0627\u0645\u062f \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647\u060c \u0633\u0631\u0642\u062a \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u0646\u0634\u0633\u062a (Session) \u062a\u0644\u06af\u0631\u0627\u0645 \u0648 \u062a\u0635\u0627\u062d\u0628 \u062d\u0633\u0627\u0628 \u06a9\u0627\u0631\u0628\u0631\u06cc (Account Takeover) \u0627\u0633\u062a\u061b \u0628\u0647\u200c\u0648\u06cc\u0698\u0647 \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u0631\u0645\u0632 \u062f\u0648\u0645 \u062a\u0644\u06af\u0631\u0627\u0645 \u0641\u0639\u0627\u0644 \u0646\u0628\u0627\u0634\u062f.\n\n\u2705 \u0636\u0631\u0648\u0631\u06cc \u0627\u0633\u062a Telegram Desktop \u0628\u0647 \u0646\u0633\u062e\u0647 7.2.9 \u06cc\u0627 \u0628\u0627\u0644\u0627\u062a\u0631 \u0627\u0631\u062a\u0642\u0627 \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n\n\ud83d\udcf1 @PingChannel \n\u062e\u0628\u0631\u060c \u062a\u062d\u0644\u06cc\u0644\u060c \u0627\u0646\u062a\u0642\u0627\u062f - \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\n\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f", "creation_timestamp": "2026-10-10T19:35:36.000000Z"} 2026-10-10T19:35:36+00:00 https://vulnerability.circl.lu/sighting/11500644-3c1e-4dec-9abf-2a4116943738/export 2026-10-11T23:10:29.003263+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "11500644-3c1e-4dec-9abf-2a4116943738", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107181", "type": "seen", "source": "https://t.me/ViralCyber/26659", "content": "\ud83d\udfe8\u06a9\u0634\u0641 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u062f\u0631 \u062a\u0644\u06af\u0631\u0627\u0645 \u062f\u0633\u06a9\u062a\u0627\u067e\u061b \u0633\u0631\u0642\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0648 \u062a\u0635\u0627\u062d\u0628 \u062d\u0633\u0627\u0628 \u06a9\u0627\u0631\u0628\u0631\u06cc \u062a\u0646\u0647\u0627 \u0628\u0627 \u06cc\u06a9 \u06a9\u0644\u06cc\u06a9!\n\u25c0\ufe0f\u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u062f\u062a \u0628\u0627\u0644\u0627 \u062f\u0631 \u0646\u0633\u062e\u0647 \u062f\u0633\u06a9\u062a\u0627\u067e \u062a\u0644\u06af\u0631\u0627\u0645 \u06a9\u0634\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0646\u0647\u0627 \u0628\u0627 \u0641\u0631\u06cc\u0628 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0631\u0627\u06cc \u06a9\u0644\u06cc\u06a9 \u0631\u0648\u06cc \u06cc\u06a9 \u0644\u06cc\u0646\u06a9 \u0645\u062e\u0631\u0628\u060c \u0641\u0627\u06cc\u0644\u200c\u0647\u0627 \u0648 \u0627\u0637\u0644\u0627\u0639\u0627\u062a Session \u062a\u0644\u06af\u0631\u0627\u0645 \u0631\u0627 \u0633\u0631\u0642\u062a \u06a9\u0646\u0646\u062f.\n\n\ud83d\udd0e \u0645\u0634\u062e\u0635\u0627\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc:\n\u2b05\u0634\u0646\u0627\u0633\u0647: CVE-2026-107181\n\u2b05 \u0634\u062f\u062a: High\n\u2b05\u0627\u0645\u062a\u06cc\u0627\u0632 : 8.6\n\u2b05 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631: Telegram Desktop \u0642\u0628\u0644 \u0627\u0632 7.2.9\n\u2b05\u0648\u0636\u0639\u06cc\u062a: \u0627\u0646\u062a\u0634\u0627\u0631 \u0639\u0645\u0648\u0645\u06cc PoC \u0648 \u0627\u0631\u0627\u0626\u0647 \u0648\u0635\u0644\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc\n\n\ud83d\udea8 \u062e\u0637\u0631\u0646\u0627\u06a9\u200c\u062a\u0631\u06cc\u0646 \u067e\u06cc\u0627\u0645\u062f \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647\u060c \u0633\u0631\u0642\u062a \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u0646\u0634\u0633\u062a (Session) \u062a\u0644\u06af\u0631\u0627\u0645 \u0648 \u062a\u0635\u0627\u062d\u0628 \u062d\u0633\u0627\u0628 \u06a9\u0627\u0631\u0628\u0631\u06cc (Account Takeover) \u0627\u0633\u062a\u061b \u0628\u0647\u200c\u0648\u06cc\u0698\u0647 \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u0631\u0645\u0632 \u062f\u0648\u0645 \u062a\u0644\u06af\u0631\u0627\u0645 \u0641\u0639\u0627\u0644 \u0646\u0628\u0627\u0634\u062f.\n\n\u2705 \u0636\u0631\u0648\u0631\u06cc \u0627\u0633\u062a Telegram Desktop \u0628\u0647 \u0646\u0633\u062e\u0647 7.2.9 \u06cc\u0627 \u0628\u0627\u0644\u0627\u062a\u0631 \u0627\u0631\u062a\u0642\u0627 \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n\n\ud83d\udcf1 @PingChannel \n\u062e\u0628\u0631\u060c \u062a\u062d\u0644\u06cc\u0644\u060c \u0627\u0646\u062a\u0642\u0627\u062f - \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\n\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f", "creation_timestamp": "2026-10-10T19:35:36.000000Z"} 2026-10-10T19:35:36+00:00 https://vulnerability.circl.lu/sighting/064a14ac-9684-4ad7-a3e1-c6d3f2f24536/export 2026-10-11T23:10:29.003344+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "064a14ac-9684-4ad7-a3e1-c6d3f2f24536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-107181", "type": "seen", "source": "https://bsky.app/profile/guruhitech.bsky.social/post/3mxjzbsfuyu2g", "content": "Telegram Desktop, falla di sicurezza: un clic pu\u00f2 rubare i file personali\n#chat #computer #messaggistica #sicurezza #telegram #truffa\n\ud83d\udd17 https://guruhitech.com/telegram-desktop-falla-sicurezza-file-personali-cve-2026-107181/", "creation_timestamp": "2026-10-10T17:29:45.473340Z"} 2026-10-10T17:29:45.473340+00:00 https://vulnerability.circl.lu/sighting/ea7814b0-c69d-44dc-a7f3-603246b091d1/export 2026-10-11T23:10:29.003412+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ea7814b0-c69d-44dc-a7f3-603246b091d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107181", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mxiyhiupch2b", "content": "Top 3 CVE for last 7 days:\nCVE-2026-21589: 78 interactions\nCVE-2026-88779: 47 interactions\nCVE-2026-102255: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-102255: 9 interactions\nCVE-2026-107181: 4 interactions\nCVE-2026-107406: 4 interactions\n", "creation_timestamp": "2026-10-10T07:42:22.987910Z"} 2026-10-10T07:42:22.987910+00:00 https://vulnerability.circl.lu/sighting/aee36baa-d9e4-47c7-a574-1edc26970cbf/export 2026-10-11T23:10:29.003485+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "aee36baa-d9e4-47c7-a574-1edc26970cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107181", "type": "seen", "source": "https://bsky.app/profile/raul.mastodon.in4matics.cat.ap.brid.gy/post/3mxixxwhmrql2", "content": "\u26a0\ufe0f Un clic en un enlla\u00e7 extern podia acabar amb el segrest de Telegram Desktop: una fallada IPC permetia llegir i exfiltrar fitxers locals. CVE-2026-107181; corregida a 7.2.9. Actualitza. #Telegram #Ciberseguretat https://beaksec.github.io/posts/telegram-desktop-one-click-account-takeover/", "creation_timestamp": "2026-10-10T07:33:43.941125Z"} 2026-10-10T07:33:43.941125+00:00 https://vulnerability.circl.lu/sighting/bd13dc2d-ed3e-4c2e-84fb-894db8fbc7a6/export 2026-10-11T23:10:29.003560+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "bd13dc2d-ed3e-4c2e-84fb-894db8fbc7a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-107181", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mxit7tgo522w", "content": "Critical Telegram Desktop Vulnerability (CVE-2026-107181): A Technical Analysis of One-Click Account Takeover via IPC\u00a0Injection\n\nTelegram Desktop CVE-2026-107181 enables one-click account takeover through IPC injection and\u2026\n\nhttps://thecybersecguru.com/exploits/telegram-desktop-cve-2026-107181/", "creation_timestamp": "2026-10-10T06:08:37.135966Z"} 2026-10-10T06:08:37.135966+00:00 https://vulnerability.circl.lu/sighting/163761fb-5ed6-4ddf-9e7e-67418b6012cb/export 2026-10-11T23:10:29.003623+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "163761fb-5ed6-4ddf-9e7e-67418b6012cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107181", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117413001329234001", "content": "\ud83d\udea8 PoC released for Telegram Desktop account takeover vulnerability; CVE-2026-107181\nhttps://beaksec.github.io/posts/telegram-desktop-one-click-account-takeover/\nA vulnerability in Telegram Desktop allows attackers to steal local files, including session keys, by tricking users into opening a specially crafted tg:// link.\nStolen session data could allow attackers to hijack Telegram accounts without knowing the victim's password.\nCVSS: 8.1 (High, v3.1) / 8.6 (High, v4.0)Affected: Telegram Desktop before 7.2.9Fixed: Version 7.2.9\nThe published PoC demonstrates how a malicious link can trigger file exfiltration through Telegram's IPC handler.", "creation_timestamp": "2026-10-09T21:10:21.197943Z"} 2026-10-09T21:10:21.197943+00:00 https://vulnerability.circl.lu/sighting/89d4b10b-01bc-48b2-b4d5-fe05bb35dd2e/export 2026-10-11T23:10:29.003700+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "89d4b10b-01bc-48b2-b4d5-fe05bb35dd2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107181", "type": "seen", "source": "https://bsky.app/profile/nube.at.app.wafrn.net/post/3mxhhebjuwu2q", "content": "Por cierto, si usan Telegram con regularidad en su versi\u00f3n desktop y est\u00e1s por debajo de la versi\u00f3n v7.2.9 deber\u00edan actualizar inmediatamente, hay una vulnerabilidad enorme en las versiones anteriores a esta versi\u00f3n\n\nhttps://www.cve.org/CVERecord?id=CVE-2026-107181 #telegram", "creation_timestamp": "2026-10-09T17:03:51.519904Z"} 2026-10-09T17:03:51.519904+00:00