CRITICAL ALERT: Telegram Vulnerability “ZDI-CAN-30207” Exposes Users to Zero-Click Attacks

A critical zero-click remote vulnerability in Telegram (ZDI-CAN-30207) with a CVSS 9.8 severity has been disclosed by Trend Micro ZDI; it allows unauthenticated remote compromise with full confidentiality, integrity, and availability impact for potentially over one billion users, and a public disclosure is scheduled for July 24, 2026 — users are advised to enable automatic updates, restrict who can send messages/files, and monitor official channels for emergency patches.