CVE-2026-30612

Latest news

1. 24 Oct
   Abandoned Time4Popcorn updater exposed millions to remote code execution

   Researchers at Eye Security found the Time4Popcorn fork of Popcorn Time used an unencrypted, unsigned updater that contacted an abandoned domain, allowing anyone controlling that domain to push executables. After registering the domain, researchers observed millions of client connections and remotely disabled the vulnerable updater to stop potential attacks (CVE-2026-30612).

   Security · 1 source

   

Articles

No articles about CVE-2026-30612 yet.