Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: weebzone Clear all filters
TI-2026-71285 CVE-2026-109427 · GHSA-q45w-888c-vpfr

Broken object authorization in Telegram-Stremio exposes private chats

Priority LOW 31

Telegram-Stremio through 5.1.0 contains a broken object-level authorization vulnerability that allows authenticated token holders to access arbitrary chat messages by forging unsigned, unauthenticated stream IDs decoded…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00209 Published 2026-10-12 No fix listed CWE-639
TI-2026-71284 CVE-2026-109426 · GHSA-f4vq-cf7c-pvmv

Telegram-Stremio leaks reversible Telegram session strings

Priority MEDIUM 40

Telegram-Stremio through 5.1.0 contains an insecure storage vulnerability that allows attackers with access to the MongoDB database, backups, or logs to recover the operator's authenticated Telegram session string, which…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.0011 Published 2026-10-12 No fix listed CWE-312