CVE-2021-40532: Telegram Web K Alpha

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Telegram Web K Alpha before 0.7.2 mishandles the characters in a document extension.

Affected products

• Telegram Web K Alpha: before 0.7.2 (fixed in 0.7.2)

Published 2021-09-06. Last modified 2026-06-17.