// tag
Telegram
Security incidents tagged Telegram. Newest first.
- incidents
- 1
- live
- 0
- patched
- 1
## 1 Telegram incident in the last year
through Oct 22, 2026crit 4 · high 3 · med 2 · low 1 · upd ½severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½lessmore
show 1 older incident1 older incident
September 2026 1
- highclosedpatchedclosed Sep 16, 2026
Telegram Desktop one-click account takeover via tg:// IPC (CVE-2026-107181)
› Telegram Desktop
CVE-2026-107181 (CVSS 8.1) in Telegram Desktop before 7.2.9 lets a crafted tg:// link inject IPC commands and exfiltrate tdata session files, enabling account takeover without the password/2FA. Fixed in 7.2.9 (mid-September); continued discussion into early October.
CVE-2026-107181
