Read the docs

weebzone

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

weebzone records in CISA KEV

No weebzone vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-71284 CVE-2026-109426 · GHSA-f4vq-cf7c-pvmv

Telegram-Stremio leaks reversible Telegram session strings

Priority MEDIUM 40

Telegram-Stremio through 5.1.0 contains an insecure storage vulnerability that allows attackers with access to the MongoDB database, backups, or logs to recover the operator's authenticated Telegram session string, which…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.0011 Published 2026-10-12 No fix listed CWE-312
TI-2026-71285 CVE-2026-109427 · GHSA-q45w-888c-vpfr

Broken object authorization in Telegram-Stremio exposes private chats

Priority LOW 31

Telegram-Stremio through 5.1.0 contains a broken object-level authorization vulnerability that allows authenticated token holders to access arbitrary chat messages by forging unsigned, unauthenticated stream IDs decoded…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00209 Published 2026-10-12 No fix listed CWE-639
Open these records in search →