Medium (5.3) in telegram telegram. EPSS 2.3% chance of exploitation in the next 30 days.
The Privacy > Phone Number feature in the Telegram app 5.10 for Android and iOS provides an incorrect indication that the access level is Nobody, because attackers can find these numbers via the Group Info feature, e.g., by adding a significant fraction of a region's assigned phone numbers.
Severity
CVSS 3.0
5.3 medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
2.3% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)