Abandoned Popcorn Time updater risked takeover of millions of PCs
Eye Security sinkholed updater domains and pushed a disabling update to about 2 million Windows and macOS systems.
68
Product
Popcorn Time
- Mentions · 7d3
- Mentions · 30d4
- All mentions4
- First seenOct 23, 2026
- Last mentioned3d ago
Timeline
4 articles · newest firstAbandoned Popcorn Time updater could hijack PCs via CVE-2026-30612
Eye Security seized update domains, pushed a disabling fix with over two million downloads, then gave 15 domains to Shadowserver.
71
Eye Security pushed 2 million updates to disable Popcorn Time updater
CVE-2026-30612, scored 9.8, let anyone owning abandoned updater domains push code as SYSTEM or root.
72
Abandoned Time4Popcorn updater allowed RCE over plain HTTP
Eye Security counted up to 3 million Windows and 350,000 macOS clients calling the domain it registered.
68
Related CVEs
by mentions- CVE-2026-30612<1%9.8Remote code execution in Time4 Popcorn updater components (Windows, macOS, Android)
Appears with
- Time4Popcornproduct · 4
- Eye Securityorganization · 4
- Shadowserver Foundationorganization · 2
- The Shadowserver Foundationorganization · 2
- CISAorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.