{"id":"CVE-2026-30612","published":"2026-08-27T00:00:00Z","modified":"2026-09-01T19:24:41Z","title":"An issue in Time4 Popcorn for Windows <= 6.2.1.18 and Time4Popcorn for MacOS <= 6.2.1.17 and Time4Popcorn for Android…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"An issue in Time4 Popcorn for Windows <= 6.2.1.18 and Time4Popcorn for MacOS <= 6.2.1.17 and Time4Popcorn for Android <= 3.5.0.173 allows a remote attacker to execute arbitrary code via the updater.exe for windows, PT.updd on MacOS components","provenance":"source","from":"CVE.org"},"summary":{"text":"Time4 Popcorn for Windows (up to 6.2.1.18), Time4Popcorn for MacOS (up to 6.2.1.17) and Time4Popcorn for Android (up to 3.5.0.173) download code without an integrity check, and the flaw lies in the updater.exe component on Windows and the PT.updd component on MacOS. A remote, unauthenticated attacker with no required user interaction can execute arbitrary code on the affected system.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:17:40Z"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.00424,"percentile":0.36731,"date":"2026-10-30","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":3,"pulses":[{"name":"Abandoned Popcorn Time app exposed millions of device to RCE attacks","url":"https://otx.alienvault.com/pulse/6adbc9c94be725c6ff394ad7","created":"2026-10-23"},{"name":"EbeeOct2026 Pt1","url":"https://otx.alienvault.com/pulse/6ace88556446ffa62c5a709c","created":"2026-10-13"},{"name":"Rise of the Jev-Clones","url":"https://otx.alienvault.com/pulse/6aba80800986c7309a31cc76","created":"2026-09-28"}],"provenance":"machine"},"cwes":[{"id":"CWE-494","name":"Download of Code Without Integrity Check"}],"references":[{"url":"http://time4popcorn.com","tags":[]},{"url":"https://github.com/Orcust-Automaton/Vulnerability/blob/main/LB-Link/AC1900_AZ2/bs_SetLimitCli_info.md","tags":[]}],"techniques":[],"reports":[{"id":"SRC-e7dfbcdaedcbed88ea81","title":"SharePoint Under Siege: ToolShell Exploit (CVE-2025-49706 & CVE-2025-49704) - Eye Research SharePoint 0-day uncovered (CVE-2025-53770)","publisher":"research.eye.security","url":"https://research.eye.security/sharepoint-under-siege/","date":"2025-07-19","mentions":[{"quote":"CVE-2026-30612: A vulnerability in Time4Popcorn (PopcornTime)","start":31141,"end":31202}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2026-67256","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-67256","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2025-07-19","kind":"report","label":"Named in research.eye.security: SharePoint Under Siege: ToolShell Exploit (CVE-2025-49706 & CVE-2025-49704) - Eye Resea…","url":"https://research.eye.security/sharepoint-under-siege/","provenance":"machine"},{"date":"2026-08-27","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2026-30612","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":19.4,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":7.35,"detail":"percentile 0.3673"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":1.37,"detail":"3 pulses"},{"name":"CVSS severity","points":6.86,"detail":"base score 9.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}