https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T23:05:49.517571+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-107181 fkie_cve-2026-107181 2026-10-07T23:05:51.269801+00:00

Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in Core::Sandbox that allows remote attackers to inject OPEN: records via crafted tg:// links containing unescaped semicolons. Attackers can reach the interpret: scheme handler to upload local files, including tdata session keys, to an attacker channel, enabling account takeover.

 https://vulnerability.circl.lu/vuln/ghsa-2h6w-ccjh-5jhr GHSA-2h6w-ccjh-5jhr 2026-10-07T23:05:51.269902+00:00

Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in Core::Sandbox that allows remote attackers to inject OPEN: records via crafted tg:// links containing unescaped semicolons. Attackers can reach the interpret: scheme handler to upload local files, including tdata session keys, to an attacker channel, enabling account takeover.