ThreatCluster

Instagram Vulnerability Exposes Private Content to Unauthenticated Users

First seen 26 Jan 2026, 17:54 UTC CybersecuritynewsGbhackersCyberpress 30

Article Content

Browse articles
ThreatCluster

A server-side vulnerability in Instagram allowed unauthenticated access to private posts, including photos and captions, without requiring a login or follower relationship. This issue was disclosed by security researcher Jatin Banga and was reportedly patched silently by Meta in October 2025.