Tia N.List

Reported by 2 outlets

Telegram Desktop HTML export XSS vulnerability allows chat history theft

hot0.0
Why this score
Breadth
1.00 / 2.0 · 2 sources
Authority
1.00 / 2.0 · best outlet weight
Severity
0.50 / 5.0 · CVSS + content signals
Velocity
0.00 / 2.0 · updates in 48h
Pickup speed
0.09 / 0.6 · time to second source
Recency
× 0.00 temporal multiplier
Community
+ 0.00 / 1.5 · reddit signal
Score
0.0 / 10 = base × recency + community
meterpreter.orgbeyondmachines.net first seen 27d ago

Timeline

  1. original reporting

    Discover the critical Telegram Desktop HTML export XSS vulnerability. Learn how malicious bots can steal chat history and why legacy archive

    meterpreter.org · 27d ago · September 16th, 2026

    Discover the critical Telegram Desktop HTML export XSS vulnerability. Learn how malicious bots can steal chat history and why legacy archive

    via Mastodon https://meterpreter.org/telegram-desktop-html-export-xss/?utm_source=mastodon&utm_medium=jetpack_social

  2. update from beyondmachines.net

    Telegram Desktop Flaw Allows Message Theft via Malicious HTML Exports A high-severity XSS vulnerability in Telegram Desktop's export feature

    beyondmachines.net · 25d ago · September 18th, 2026

    Telegram Desktop Flaw Allows Message Theft via Malicious HTML Exports A high-severity XSS vulnerability in Telegram Desktop's export feature

    via Mastodon https://beyondmachines.net/event_details/telegram-desktop-flaw-allows-message-theft-via-malicious-html-exports-v-m-p-y-f/gD2P6Ple2L

Covered in

digest 2026-09-18

Source on GitHub