CVE-2026-30612: Eye Security exploited a flaw in a Popcorn Time clone to neutralize it on millions of machines

Not listed so far in CISA’s catalog of actively exploited vulnerabilities.

Our analyses

Eye Security exploited a flaw in a Popcorn Time clone to neutralize it on millions of machines

The updater of an abandoned Popcorn Time fork could install any program. It is now disabled, but the application remains dangerous. Here's how to tell whether your machines are affected.

Oct 27, 20263 min read

What to do

Check whether your estate includes the affected product, including internet-facing devices.
Apply the vendor’s patch or mitigations (references below).
Watch for exploitation: this entry is updated if the vulnerability enters the exploited catalog or is the subject of a CERT-FR alert.

References

NVD entry (NIST)