Osint Scanning ExposureExposure

Telegram zero-click ZDI-CAN-30207 claims vs lack of public technical details

March 27, 2026Gray Hats, Florian Roth

Gray Hats amplifies a claimed Telegram “critical 9.8 CVSS zero-click flaw,” while Florian Roth cautions that without technical details, most commentary is guesswork despite the ZDI entry seeming plausible.

A critical 9.8 CVSS zero-click flaw (ZDI-CAN-30207) hits Telegram, affecting 1 billion users.
No interaction needed for full system hijack.
But so far there are no actual technical details public, so most of the commentary around it is still guesswork
Gray Hats
Florian Roth
zero-clickvulnerability intelrumor controltelegramcveios exploit

See what experts are saying right now

This finding is one of many signals tracked across Cyber Security. The live feed updates every few hours with new expert voices, debates, and emerging ideas.

← Back to Cyber Security