
Telegram Desktop Zero-Day Allowed Account Takeover; Patch Ships in v7.2.9
A high-severity Telegram Desktop vulnerability, CVE-2026-107181, let attackers plant a file in a victim's group chat and use IPC command injection to exfiltrate local files, including session data. With no...























