Skip to content

CVE-2026-30612

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
October 23, 2026
Last Seen
October 23, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Researchers at Eye Security discovered a vulnerability in the abandoned Time4Popcorn app, tracked as CVE-2026-30612, which could allow remote code execution on millions of Windows and macOS devices. The app's updater contacted an abandoned domain over unencrypted HTTP, accepting executables without...

Public Exploits

Checking GitHub for proof-of-concept code…