Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security vulnerability has been detected in Telegram Desktop up to 6.7.5. This vulnerability affects the function RequestButton of the file Telegram/SourceFiles/boxes/url_auth_box.cpp of the component Bot API. The manipulation of the argument login_url leads to null pointer dereference. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. There is ongoing doubt regarding the real existence of this vulnerability. Upgrading to version 6.7.6 is able to resolve this issue. Upgrading the affected component is recommended. The vendor provides this rationale for the dispute: "[T]he described scenario does not lead to any security issue or vulnerability, and only causes a one-time crash. In the outlined scenario, the targeted user must perform an active action, which doesn't produce any consequences after the app is relaunched."
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-7701 A security vulnerability has been detected in Telegram Desktop up to 6.7.5. This vulnerability affects the function RequestButton of the file Telegram/SourceFiles/boxes… https://www.cve.org/CVERecord?id=CVE-2026-7701
Post summary
The post announces CVE‑2026‑7701, identifying the function and file in Telegram Desktop affected, but provides no PoC, exploit, or patch details.
CVE-2026-7701 Null Pointer Dereference in Telegram Desktop Bot API RequestButton Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7701
Post summary
The statement identifies CVE‑2026‑7701 as a null‑pointer dereference in Telegram Desktop’s Bot API RequestButton function, but provides no exploit details, patch info, or evidence of active exploitation.
🚨*CVE* CVE-2026-7701 A security vulnerability has been detected in Telegram Desktop up to 6.7.5. This vulnerability affects the function RequestButton of the file Telegram/SourceFiles/boxes… https://www.cve.org/CVERecord?id=CVE-2026-7701 ----- Traducción: CVE-2026-7701 Se … http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑7701 affecting Telegram Desktop’s RequestButton function, but does not provide any PoC, exploit, or patch details.