Eye Security pushed 2 million updates to disable Popcorn Time updater
CVE-2026-30612, scored 9.8, let anyone owning abandoned updater domains push code as SYSTEM or root.
1
Stories per day · 30 days
Relatedpopcorn-time3supply-chain2windows2abandoned-software1macos1remote-code-execution1shadowserver1sinkhole1software-updater1updater1
2 stories, newest first · one card per story
Stories tagged #time4popcorn
Abandoned Time4Popcorn updater allowed RCE over plain HTTP
Eye Security counted up to 3 million Windows and 350,000 macOS clients calling the domain it registered.
1