TI-2025-32667 CVE-2025-52572Hikka vulnerable to RCE through dangling web interfacePriority MEDIUM 50Hikka, a Telegram userbot, has vulnerability affects all users on all versions of Hikka.CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.00716 · Published 2025-06-24 · No fix listed CWE-287
TI-2025-32666 CVE-2025-52571Hikka vulnerable to RCE through edits in a channelPriority MEDIUM 42Hikka is a Telegram userbot.CVSS 3.1CRITICAL 9.7· Network · No auth · User interaction · EPSS 0.00324 · Published 2025-06-24 · Fixed in 1.6.2 CWE-287