{"vulnerability": "cve-2026-107181", "sightings": [{"uuid": "446c77c8-06cd-4db7-8382-1bcc5c0479c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-107181", "type": "seen", "source": "https://www.acn.gov.it/portale/w/telegram-desktop-poc-pubblica-per-lo-sfruttamento-della-cve-2026-107181", "content": "", "creation_timestamp": "2026-10-07T09:08:02.000000Z"}, {"uuid": "e44808db-a621-4dd7-ac7f-90246bba4004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107181", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxdlnzxpb32z", "content": "CVE-2026-107181\nVersions of Telegram Desktop older than 7.2.9 allow specially crafted tg:// links to trick the app into sending local files, including the files that store your login sessions. This could let an attacker take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-08T04:10:04.896761Z"}, {"uuid": "1f00a57d-b023-4e9c-9d68-9c12a7efe81f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107181", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxfvfl3vpb2f", "content": "A critical Telegram Desktop account takeover vulnerability (CVE-2026-107181) exposes users to session hijacking. Exploit details and PoC are now public.\n\n#Telegram #Cybersecurity #CVE2026107181 #AccountTakeover #PoC", "creation_timestamp": "2026-10-09T02:09:38.110290Z"}]}