CVE-2026-52103
A zero-click remote code execution (RCE) vulnerability in the /Terminal/Notification.hs component of SimpleX Chat before v6.5 allows attackers to execute arbitrary commands in t…
Published: 2026-08-26 · CVSS: 9.8 · CVSS 3.1
A zero-click remote code execution (RCE) vulnerability in the /Terminal/Notification.hs component of SimpleX Chat before v6.5 allows attackers to execute arbitrary commands in the context of the application without user interaction via sending a crafted payload in a text message.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7