https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 23:10:29 +0000 https://vulnerability.circl.lu/sighting/bb857e4b-2f81-47f8-b04d-986eb8b03d7b/export {"uuid": "bb857e4b-2f81-47f8-b04d-986eb8b03d7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107181", "type": "seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mxlhr5nzfk2v", "content": "Vuln\u00e9rabilit\u00e9s \u00e9lev\u00e9es (7 \u2264 CVSS < 9) \u00b7 1\n\u2022 Telegram Desktop (CVE-2026-107181), CVSS 8.6 (Numerama)", "creation_timestamp": "2026-10-11T07:21:32.158222Z"} {"uuid": "bb857e4b-2f81-47f8-b04d-986eb8b03d7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107181", "type": "seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mxlhr5nzfk2v", "content": "Vuln\u00e9rabilit\u00e9s \u00e9lev\u00e9es (7 \u2264 CVSS < 9) \u00b7 1\n\u2022 Telegram Desktop (CVE-2026-107181), CVSS 8.6 (Numerama)", "creation_timestamp": "2026-10-11T07:21:32.158222Z"} https://vulnerability.circl.lu/sighting/bb857e4b-2f81-47f8-b04d-986eb8b03d7b/export Sun, 11 Oct 2026 07:21:32 +0000 https://vulnerability.circl.lu/sighting/7497bd5a-ad3b-4f0f-b031-2e246bd5cb38/export {"uuid": "7497bd5a-ad3b-4f0f-b031-2e246bd5cb38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107181", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxkeodekgv2n", "content": "\ud83e\udd16 CVE-2026-107181 (CVSS 8.1): Telegram Desktop's IPC fails to escape its ';' separator. A crafted tg:// link injects an OPEN: cmd reaching internal interpret: URI \u2192 arbitrary file read, session theft, ATO.\nhttps://beaksec.github.io/posts/telegram-desktop-one-click-account-takeover/", "creation_timestamp": "2026-10-10T20:53:36.514237Z"} {"uuid": "7497bd5a-ad3b-4f0f-b031-2e246bd5cb38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107181", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxkeodekgv2n", "content": "\ud83e\udd16 CVE-2026-107181 (CVSS 8.1): Telegram Desktop's IPC fails to escape its ';' separator. A crafted tg:// link injects an OPEN: cmd reaching internal interpret: URI \u2192 arbitrary file read, session theft, ATO.\nhttps://beaksec.github.io/posts/telegram-desktop-one-click-account-takeover/", "creation_timestamp": "2026-10-10T20:53:36.514237Z"} https://vulnerability.circl.lu/sighting/7497bd5a-ad3b-4f0f-b031-2e246bd5cb38/export Sat, 10 Oct 2026 20:53:36 +0000 https://vulnerability.circl.lu/sighting/11cae2df-c932-4e10-b8ba-7792c0102695/export {"uuid": "11cae2df-c932-4e10-b8ba-7792c0102695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107181", "type": "published-proof-of-concept", "source": "https://t.me/ViralCyber/26659", "content": "\ud83d\udfe8\u06a9\u0634\u0641 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u062f\u0631 \u062a\u0644\u06af\u0631\u0627\u0645 \u062f\u0633\u06a9\u062a\u0627\u067e\u061b \u0633\u0631\u0642\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0648 \u062a\u0635\u0627\u062d\u0628 \u062d\u0633\u0627\u0628 \u06a9\u0627\u0631\u0628\u0631\u06cc \u062a\u0646\u0647\u0627 \u0628\u0627 \u06cc\u06a9 \u06a9\u0644\u06cc\u06a9!\n\u25c0\ufe0f\u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u062f\u062a \u0628\u0627\u0644\u0627 \u062f\u0631 \u0646\u0633\u062e\u0647 \u062f\u0633\u06a9\u062a\u0627\u067e \u062a\u0644\u06af\u0631\u0627\u0645 \u06a9\u0634\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0646\u0647\u0627 \u0628\u0627 \u0641\u0631\u06cc\u0628 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0631\u0627\u06cc \u06a9\u0644\u06cc\u06a9 \u0631\u0648\u06cc \u06cc\u06a9 \u0644\u06cc\u0646\u06a9 \u0645\u062e\u0631\u0628\u060c \u0641\u0627\u06cc\u0644\u200c\u0647\u0627 \u0648 \u0627\u0637\u0644\u0627\u0639\u0627\u062a Session \u062a\u0644\u06af\u0631\u0627\u0645 \u0631\u0627 \u0633\u0631\u0642\u062a \u06a9\u0646\u0646\u062f.\n\n\ud83d\udd0e \u0645\u0634\u062e\u0635\u0627\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc:\n\u2b05\u0634\u0646\u0627\u0633\u0647: CVE-2026-107181\n\u2b05 \u0634\u062f\u062a: High\n\u2b05\u0627\u0645\u062a\u06cc\u0627\u0632 : 8.6\n\u2b05 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631: Telegram Desktop \u0642\u0628\u0644 \u0627\u0632 7.2.9\n\u2b05\u0648\u0636\u0639\u06cc\u062a: \u0627\u0646\u062a\u0634\u0627\u0631 \u0639\u0645\u0648\u0645\u06cc PoC \u0648 \u0627\u0631\u0627\u0626\u0647 \u0648\u0635\u0644\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc\n\n\ud83d\udea8 \u062e\u0637\u0631\u0646\u0627\u06a9\u200c\u062a\u0631\u06cc\u0646 \u067e\u06cc\u0627\u0645\u062f \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647\u060c \u0633\u0631\u0642\u062a \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u0646\u0634\u0633\u062a (Session) \u062a\u0644\u06af\u0631\u0627\u0645 \u0648 \u062a\u0635\u0627\u062d\u0628 \u062d\u0633\u0627\u0628 \u06a9\u0627\u0631\u0628\u0631\u06cc (Account Takeover) \u0627\u0633\u062a\u061b \u0628\u0647\u200c\u0648\u06cc\u0698\u0647 \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u0631\u0645\u0632 \u062f\u0648\u0645 \u062a\u0644\u06af\u0631\u0627\u0645 \u0641\u0639\u0627\u0644 \u0646\u0628\u0627\u0634\u062f.\n\n\u2705 \u0636\u0631\u0648\u0631\u06cc \u0627\u0633\u062a Telegram Desktop \u0628\u0647 \u0646\u0633\u062e\u0647 7.2.9 \u06cc\u0627 \u0628\u0627\u0644\u0627\u062a\u0631 \u0627\u0631\u062a\u0642\u0627 \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n\n\ud83d\udcf1 @PingChannel \n\u062e\u0628\u0631\u060c \u062a\u062d\u0644\u06cc\u0644\u060c \u0627\u0646\u062a\u0642\u0627\u062f - \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\n\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f", "creation_timestamp": "2026-10-10T19:35:36.000000Z"} {"uuid": "11cae2df-c932-4e10-b8ba-7792c0102695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107181", "type": "published-proof-of-concept", "source": "https://t.me/ViralCyber/26659", "content": "\ud83d\udfe8\u06a9\u0634\u0641 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u062f\u0631 \u062a\u0644\u06af\u0631\u0627\u0645 \u062f\u0633\u06a9\u062a\u0627\u067e\u061b \u0633\u0631\u0642\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0648 \u062a\u0635\u0627\u062d\u0628 \u062d\u0633\u0627\u0628 \u06a9\u0627\u0631\u0628\u0631\u06cc \u062a\u0646\u0647\u0627 \u0628\u0627 \u06cc\u06a9 \u06a9\u0644\u06cc\u06a9!\n\u25c0\ufe0f\u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u062f\u062a \u0628\u0627\u0644\u0627 \u062f\u0631 \u0646\u0633\u062e\u0647 \u062f\u0633\u06a9\u062a\u0627\u067e \u062a\u0644\u06af\u0631\u0627\u0645 \u06a9\u0634\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0646\u0647\u0627 \u0628\u0627 \u0641\u0631\u06cc\u0628 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0631\u0627\u06cc \u06a9\u0644\u06cc\u06a9 \u0631\u0648\u06cc \u06cc\u06a9 \u0644\u06cc\u0646\u06a9 \u0645\u062e\u0631\u0628\u060c \u0641\u0627\u06cc\u0644\u200c\u0647\u0627 \u0648 \u0627\u0637\u0644\u0627\u0639\u0627\u062a Session \u062a\u0644\u06af\u0631\u0627\u0645 \u0631\u0627 \u0633\u0631\u0642\u062a \u06a9\u0646\u0646\u062f.\n\n\ud83d\udd0e \u0645\u0634\u062e\u0635\u0627\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc:\n\u2b05\u0634\u0646\u0627\u0633\u0647: CVE-2026-107181\n\u2b05 \u0634\u062f\u062a: High\n\u2b05\u0627\u0645\u062a\u06cc\u0627\u0632 : 8.6\n\u2b05 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631: Telegram Desktop \u0642\u0628\u0644 \u0627\u0632 7.2.9\n\u2b05\u0648\u0636\u0639\u06cc\u062a: \u0627\u0646\u062a\u0634\u0627\u0631 \u0639\u0645\u0648\u0645\u06cc PoC \u0648 \u0627\u0631\u0627\u0626\u0647 \u0648\u0635\u0644\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc\n\n\ud83d\udea8 \u062e\u0637\u0631\u0646\u0627\u06a9\u200c\u062a\u0631\u06cc\u0646 \u067e\u06cc\u0627\u0645\u062f \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647\u060c \u0633\u0631\u0642\u062a \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u0646\u0634\u0633\u062a (Session) \u062a\u0644\u06af\u0631\u0627\u0645 \u0648 \u062a\u0635\u0627\u062d\u0628 \u062d\u0633\u0627\u0628 \u06a9\u0627\u0631\u0628\u0631\u06cc (Account Takeover) \u0627\u0633\u062a\u061b \u0628\u0647\u200c\u0648\u06cc\u0698\u0647 \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u0631\u0645\u0632 \u062f\u0648\u0645 \u062a\u0644\u06af\u0631\u0627\u0645 \u0641\u0639\u0627\u0644 \u0646\u0628\u0627\u0634\u062f.\n\n\u2705 \u0636\u0631\u0648\u0631\u06cc \u0627\u0633\u062a Telegram Desktop \u0628\u0647 \u0646\u0633\u062e\u0647 7.2.9 \u06cc\u0627 \u0628\u0627\u0644\u0627\u062a\u0631 \u0627\u0631\u062a\u0642\u0627 \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n\n\ud83d\udcf1 @PingChannel \n\u062e\u0628\u0631\u060c \u062a\u062d\u0644\u06cc\u0644\u060c \u0627\u0646\u062a\u0642\u0627\u062f - \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\n\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f", "creation_timestamp": "2026-10-10T19:35:36.000000Z"} https://vulnerability.circl.lu/sighting/11cae2df-c932-4e10-b8ba-7792c0102695/export Sat, 10 Oct 2026 19:35:36 +0000 https://vulnerability.circl.lu/sighting/11500644-3c1e-4dec-9abf-2a4116943738/export {"uuid": "11500644-3c1e-4dec-9abf-2a4116943738", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107181", "type": "seen", "source": "https://t.me/ViralCyber/26659", "content": "\ud83d\udfe8\u06a9\u0634\u0641 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u062f\u0631 \u062a\u0644\u06af\u0631\u0627\u0645 \u062f\u0633\u06a9\u062a\u0627\u067e\u061b \u0633\u0631\u0642\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0648 \u062a\u0635\u0627\u062d\u0628 \u062d\u0633\u0627\u0628 \u06a9\u0627\u0631\u0628\u0631\u06cc \u062a\u0646\u0647\u0627 \u0628\u0627 \u06cc\u06a9 \u06a9\u0644\u06cc\u06a9!\n\u25c0\ufe0f\u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u062f\u062a \u0628\u0627\u0644\u0627 \u062f\u0631 \u0646\u0633\u062e\u0647 \u062f\u0633\u06a9\u062a\u0627\u067e \u062a\u0644\u06af\u0631\u0627\u0645 \u06a9\u0634\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0646\u0647\u0627 \u0628\u0627 \u0641\u0631\u06cc\u0628 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0631\u0627\u06cc \u06a9\u0644\u06cc\u06a9 \u0631\u0648\u06cc \u06cc\u06a9 \u0644\u06cc\u0646\u06a9 \u0645\u062e\u0631\u0628\u060c \u0641\u0627\u06cc\u0644\u200c\u0647\u0627 \u0648 \u0627\u0637\u0644\u0627\u0639\u0627\u062a Session \u062a\u0644\u06af\u0631\u0627\u0645 \u0631\u0627 \u0633\u0631\u0642\u062a \u06a9\u0646\u0646\u062f.\n\n\ud83d\udd0e \u0645\u0634\u062e\u0635\u0627\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc:\n\u2b05\u0634\u0646\u0627\u0633\u0647: CVE-2026-107181\n\u2b05 \u0634\u062f\u062a: High\n\u2b05\u0627\u0645\u062a\u06cc\u0627\u0632 : 8.6\n\u2b05 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631: Telegram Desktop \u0642\u0628\u0644 \u0627\u0632 7.2.9\n\u2b05\u0648\u0636\u0639\u06cc\u062a: \u0627\u0646\u062a\u0634\u0627\u0631 \u0639\u0645\u0648\u0645\u06cc PoC \u0648 \u0627\u0631\u0627\u0626\u0647 \u0648\u0635\u0644\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc\n\n\ud83d\udea8 \u062e\u0637\u0631\u0646\u0627\u06a9\u200c\u062a\u0631\u06cc\u0646 \u067e\u06cc\u0627\u0645\u062f \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647\u060c \u0633\u0631\u0642\u062a \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u0646\u0634\u0633\u062a (Session) \u062a\u0644\u06af\u0631\u0627\u0645 \u0648 \u062a\u0635\u0627\u062d\u0628 \u062d\u0633\u0627\u0628 \u06a9\u0627\u0631\u0628\u0631\u06cc (Account Takeover) \u0627\u0633\u062a\u061b \u0628\u0647\u200c\u0648\u06cc\u0698\u0647 \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u0631\u0645\u0632 \u062f\u0648\u0645 \u062a\u0644\u06af\u0631\u0627\u0645 \u0641\u0639\u0627\u0644 \u0646\u0628\u0627\u0634\u062f.\n\n\u2705 \u0636\u0631\u0648\u0631\u06cc \u0627\u0633\u062a Telegram Desktop \u0628\u0647 \u0646\u0633\u062e\u0647 7.2.9 \u06cc\u0627 \u0628\u0627\u0644\u0627\u062a\u0631 \u0627\u0631\u062a\u0642\u0627 \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n\n\ud83d\udcf1 @PingChannel \n\u062e\u0628\u0631\u060c \u062a\u062d\u0644\u06cc\u0644\u060c \u0627\u0646\u062a\u0642\u0627\u062f - \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\n\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f", "creation_timestamp": "2026-10-10T19:35:36.000000Z"} {"uuid": "11500644-3c1e-4dec-9abf-2a4116943738", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107181", "type": "seen", "source": "https://t.me/ViralCyber/26659", "content": "\ud83d\udfe8\u06a9\u0634\u0641 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u062f\u0631 \u062a\u0644\u06af\u0631\u0627\u0645 \u062f\u0633\u06a9\u062a\u0627\u067e\u061b \u0633\u0631\u0642\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0648 \u062a\u0635\u0627\u062d\u0628 \u062d\u0633\u0627\u0628 \u06a9\u0627\u0631\u0628\u0631\u06cc \u062a\u0646\u0647\u0627 \u0628\u0627 \u06cc\u06a9 \u06a9\u0644\u06cc\u06a9!\n\u25c0\ufe0f\u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u062f\u062a \u0628\u0627\u0644\u0627 \u062f\u0631 \u0646\u0633\u062e\u0647 \u062f\u0633\u06a9\u062a\u0627\u067e \u062a\u0644\u06af\u0631\u0627\u0645 \u06a9\u0634\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0646\u0647\u0627 \u0628\u0627 \u0641\u0631\u06cc\u0628 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0631\u0627\u06cc \u06a9\u0644\u06cc\u06a9 \u0631\u0648\u06cc \u06cc\u06a9 \u0644\u06cc\u0646\u06a9 \u0645\u062e\u0631\u0628\u060c \u0641\u0627\u06cc\u0644\u200c\u0647\u0627 \u0648 \u0627\u0637\u0644\u0627\u0639\u0627\u062a Session \u062a\u0644\u06af\u0631\u0627\u0645 \u0631\u0627 \u0633\u0631\u0642\u062a \u06a9\u0646\u0646\u062f.\n\n\ud83d\udd0e \u0645\u0634\u062e\u0635\u0627\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc:\n\u2b05\u0634\u0646\u0627\u0633\u0647: CVE-2026-107181\n\u2b05 \u0634\u062f\u062a: High\n\u2b05\u0627\u0645\u062a\u06cc\u0627\u0632 : 8.6\n\u2b05 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631: Telegram Desktop \u0642\u0628\u0644 \u0627\u0632 7.2.9\n\u2b05\u0648\u0636\u0639\u06cc\u062a: \u0627\u0646\u062a\u0634\u0627\u0631 \u0639\u0645\u0648\u0645\u06cc PoC \u0648 \u0627\u0631\u0627\u0626\u0647 \u0648\u0635\u0644\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc\n\n\ud83d\udea8 \u062e\u0637\u0631\u0646\u0627\u06a9\u200c\u062a\u0631\u06cc\u0646 \u067e\u06cc\u0627\u0645\u062f \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647\u060c \u0633\u0631\u0642\u062a \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u0646\u0634\u0633\u062a (Session) \u062a\u0644\u06af\u0631\u0627\u0645 \u0648 \u062a\u0635\u0627\u062d\u0628 \u062d\u0633\u0627\u0628 \u06a9\u0627\u0631\u0628\u0631\u06cc (Account Takeover) \u0627\u0633\u062a\u061b \u0628\u0647\u200c\u0648\u06cc\u0698\u0647 \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u0631\u0645\u0632 \u062f\u0648\u0645 \u062a\u0644\u06af\u0631\u0627\u0645 \u0641\u0639\u0627\u0644 \u0646\u0628\u0627\u0634\u062f.\n\n\u2705 \u0636\u0631\u0648\u0631\u06cc \u0627\u0633\u062a Telegram Desktop \u0628\u0647 \u0646\u0633\u062e\u0647 7.2.9 \u06cc\u0627 \u0628\u0627\u0644\u0627\u062a\u0631 \u0627\u0631\u062a\u0642\u0627 \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n\n\ud83d\udcf1 @PingChannel \n\u062e\u0628\u0631\u060c \u062a\u062d\u0644\u06cc\u0644\u060c \u0627\u0646\u062a\u0642\u0627\u062f - \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\n\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f", "creation_timestamp": "2026-10-10T19:35:36.000000Z"} https://vulnerability.circl.lu/sighting/11500644-3c1e-4dec-9abf-2a4116943738/export Sat, 10 Oct 2026 19:35:36 +0000 https://vulnerability.circl.lu/sighting/064a14ac-9684-4ad7-a3e1-c6d3f2f24536/export {"uuid": "064a14ac-9684-4ad7-a3e1-c6d3f2f24536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-107181", "type": "seen", "source": "https://bsky.app/profile/guruhitech.bsky.social/post/3mxjzbsfuyu2g", "content": "Telegram Desktop, falla di sicurezza: un clic pu\u00f2 rubare i file personali\n#chat #computer #messaggistica #sicurezza #telegram #truffa\n\ud83d\udd17 https://guruhitech.com/telegram-desktop-falla-sicurezza-file-personali-cve-2026-107181/", "creation_timestamp": "2026-10-10T17:29:45.473340Z"} {"uuid": "064a14ac-9684-4ad7-a3e1-c6d3f2f24536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-107181", "type": "seen", "source": "https://bsky.app/profile/guruhitech.bsky.social/post/3mxjzbsfuyu2g", "content": "Telegram Desktop, falla di sicurezza: un clic pu\u00f2 rubare i file personali\n#chat #computer #messaggistica #sicurezza #telegram #truffa\n\ud83d\udd17 https://guruhitech.com/telegram-desktop-falla-sicurezza-file-personali-cve-2026-107181/", "creation_timestamp": "2026-10-10T17:29:45.473340Z"} https://vulnerability.circl.lu/sighting/064a14ac-9684-4ad7-a3e1-c6d3f2f24536/export Sat, 10 Oct 2026 17:29:45 +0000 https://vulnerability.circl.lu/sighting/ea7814b0-c69d-44dc-a7f3-603246b091d1/export {"uuid": "ea7814b0-c69d-44dc-a7f3-603246b091d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107181", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mxiyhiupch2b", "content": "Top 3 CVE for last 7 days:\nCVE-2026-21589: 78 interactions\nCVE-2026-88779: 47 interactions\nCVE-2026-102255: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-102255: 9 interactions\nCVE-2026-107181: 4 interactions\nCVE-2026-107406: 4 interactions\n", "creation_timestamp": "2026-10-10T07:42:22.987910Z"} {"uuid": "ea7814b0-c69d-44dc-a7f3-603246b091d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107181", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mxiyhiupch2b", "content": "Top 3 CVE for last 7 days:\nCVE-2026-21589: 78 interactions\nCVE-2026-88779: 47 interactions\nCVE-2026-102255: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-102255: 9 interactions\nCVE-2026-107181: 4 interactions\nCVE-2026-107406: 4 interactions\n", "creation_timestamp": "2026-10-10T07:42:22.987910Z"} https://vulnerability.circl.lu/sighting/ea7814b0-c69d-44dc-a7f3-603246b091d1/export Sat, 10 Oct 2026 07:42:22 +0000 https://vulnerability.circl.lu/sighting/aee36baa-d9e4-47c7-a574-1edc26970cbf/export {"uuid": "aee36baa-d9e4-47c7-a574-1edc26970cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107181", "type": "seen", "source": "https://bsky.app/profile/raul.mastodon.in4matics.cat.ap.brid.gy/post/3mxixxwhmrql2", "content": "\u26a0\ufe0f Un clic en un enlla\u00e7 extern podia acabar amb el segrest de Telegram Desktop: una fallada IPC permetia llegir i exfiltrar fitxers locals. CVE-2026-107181; corregida a 7.2.9. Actualitza. #Telegram #Ciberseguretat https://beaksec.github.io/posts/telegram-desktop-one-click-account-takeover/", "creation_timestamp": "2026-10-10T07:33:43.941125Z"} {"uuid": "aee36baa-d9e4-47c7-a574-1edc26970cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107181", "type": "seen", "source": "https://bsky.app/profile/raul.mastodon.in4matics.cat.ap.brid.gy/post/3mxixxwhmrql2", "content": "\u26a0\ufe0f Un clic en un enlla\u00e7 extern podia acabar amb el segrest de Telegram Desktop: una fallada IPC permetia llegir i exfiltrar fitxers locals. CVE-2026-107181; corregida a 7.2.9. Actualitza. #Telegram #Ciberseguretat https://beaksec.github.io/posts/telegram-desktop-one-click-account-takeover/", "creation_timestamp": "2026-10-10T07:33:43.941125Z"} https://vulnerability.circl.lu/sighting/aee36baa-d9e4-47c7-a574-1edc26970cbf/export Sat, 10 Oct 2026 07:33:43 +0000 https://vulnerability.circl.lu/sighting/bd13dc2d-ed3e-4c2e-84fb-894db8fbc7a6/export {"uuid": "bd13dc2d-ed3e-4c2e-84fb-894db8fbc7a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-107181", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mxit7tgo522w", "content": "Critical Telegram Desktop Vulnerability (CVE-2026-107181): A Technical Analysis of One-Click Account Takeover via IPC\u00a0Injection\n\nTelegram Desktop CVE-2026-107181 enables one-click account takeover through IPC injection and\u2026\n\nhttps://thecybersecguru.com/exploits/telegram-desktop-cve-2026-107181/", "creation_timestamp": "2026-10-10T06:08:37.135966Z"} {"uuid": "bd13dc2d-ed3e-4c2e-84fb-894db8fbc7a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-107181", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mxit7tgo522w", "content": "Critical Telegram Desktop Vulnerability (CVE-2026-107181): A Technical Analysis of One-Click Account Takeover via IPC\u00a0Injection\n\nTelegram Desktop CVE-2026-107181 enables one-click account takeover through IPC injection and\u2026\n\nhttps://thecybersecguru.com/exploits/telegram-desktop-cve-2026-107181/", "creation_timestamp": "2026-10-10T06:08:37.135966Z"} https://vulnerability.circl.lu/sighting/bd13dc2d-ed3e-4c2e-84fb-894db8fbc7a6/export Sat, 10 Oct 2026 06:08:37 +0000 https://vulnerability.circl.lu/sighting/163761fb-5ed6-4ddf-9e7e-67418b6012cb/export {"uuid": "163761fb-5ed6-4ddf-9e7e-67418b6012cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107181", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117413001329234001", "content": "\ud83d\udea8 PoC released for Telegram Desktop account takeover vulnerability; CVE-2026-107181\nhttps://beaksec.github.io/posts/telegram-desktop-one-click-account-takeover/\nA vulnerability in Telegram Desktop allows attackers to steal local files, including session keys, by tricking users into opening a specially crafted tg:// link.\nStolen session data could allow attackers to hijack Telegram accounts without knowing the victim's password.\nCVSS: 8.1 (High, v3.1) / 8.6 (High, v4.0)Affected: Telegram Desktop before 7.2.9Fixed: Version 7.2.9\nThe published PoC demonstrates how a malicious link can trigger file exfiltration through Telegram's IPC handler.", "creation_timestamp": "2026-10-09T21:10:21.197943Z"} {"uuid": "163761fb-5ed6-4ddf-9e7e-67418b6012cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107181", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117413001329234001", "content": "\ud83d\udea8 PoC released for Telegram Desktop account takeover vulnerability; CVE-2026-107181\nhttps://beaksec.github.io/posts/telegram-desktop-one-click-account-takeover/\nA vulnerability in Telegram Desktop allows attackers to steal local files, including session keys, by tricking users into opening a specially crafted tg:// link.\nStolen session data could allow attackers to hijack Telegram accounts without knowing the victim's password.\nCVSS: 8.1 (High, v3.1) / 8.6 (High, v4.0)Affected: Telegram Desktop before 7.2.9Fixed: Version 7.2.9\nThe published PoC demonstrates how a malicious link can trigger file exfiltration through Telegram's IPC handler.", "creation_timestamp": "2026-10-09T21:10:21.197943Z"} https://vulnerability.circl.lu/sighting/163761fb-5ed6-4ddf-9e7e-67418b6012cb/export Fri, 09 Oct 2026 21:10:21 +0000 https://vulnerability.circl.lu/sighting/89d4b10b-01bc-48b2-b4d5-fe05bb35dd2e/export {"uuid": "89d4b10b-01bc-48b2-b4d5-fe05bb35dd2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107181", "type": "seen", "source": "https://bsky.app/profile/nube.at.app.wafrn.net/post/3mxhhebjuwu2q", "content": "Por cierto, si usan Telegram con regularidad en su versi\u00f3n desktop y est\u00e1s por debajo de la versi\u00f3n v7.2.9 deber\u00edan actualizar inmediatamente, hay una vulnerabilidad enorme en las versiones anteriores a esta versi\u00f3n\n\nhttps://www.cve.org/CVERecord?id=CVE-2026-107181 #telegram", "creation_timestamp": "2026-10-09T17:03:51.519904Z"} {"uuid": "89d4b10b-01bc-48b2-b4d5-fe05bb35dd2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107181", "type": "seen", "source": "https://bsky.app/profile/nube.at.app.wafrn.net/post/3mxhhebjuwu2q", "content": "Por cierto, si usan Telegram con regularidad en su versi\u00f3n desktop y est\u00e1s por debajo de la versi\u00f3n v7.2.9 deber\u00edan actualizar inmediatamente, hay una vulnerabilidad enorme en las versiones anteriores a esta versi\u00f3n\n\nhttps://www.cve.org/CVERecord?id=CVE-2026-107181 #telegram", "creation_timestamp": "2026-10-09T17:03:51.519904Z"} https://vulnerability.circl.lu/sighting/89d4b10b-01bc-48b2-b4d5-fe05bb35dd2e/export Fri, 09 Oct 2026 17:03:51 +0000