Cyber threat intelligence firm
Appears in 1 story · Last updated Oct 30, 2026
Assigned CVE-2026-107181
A single clicked link could empty a Telegram Desktop account. The link slipped hidden commands into the app's local socket, which failed to escape the semicolon separating them. Those commands read files that together unlock the login and sent them to an attacker's chat.
Updated Oct 30
No stories match your search
Try a different keyword
How would you like to describe your experience with the app today?
