Skip to content
OpenAdvisories

Archive

7 October 2026

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 8.1
    CVE-2026-107181 Public exploit

    Telegram Desktop before 7.2.9 IPC Record Injection File Exfiltration via interpret: Scheme

    Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in Core::Sandbox that allows remote attackers to inject OPEN: records via crafted tg:// links containing unescaped semicolons. Attackers can reach the interpret: scheme han…

  • High 7.2
    CVE-2026-102257 Public exploit

    A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extra…

  • High 7.8
    CVE-2026-102256 Public exploit

    Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerab…