Skip to content
OpenAdvisories

Vendor

weebzone

2 known vulnerabilities.

Products

Telegram-Stremio 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-109427

    Telegram-Stremio 5.1.0 Broken Object Authorization via Stream IDs

    Telegram-Stremio through 5.1.0 contains a broken object-level authorization vulnerability that allows authenticated token holders to access arbitrary chat messages by forging unsigned, unauthenticated stream IDs decoded via encode_string/decode_string functio…

    weebzone Telegram-Stremio