{"metadata": {"vulnerability": "CVE-2026-30612", "count": 24, "kinds": {"milestone": 4, "sighting": 12, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-03-04T00:00:00Z", "date_only": false, "value": "2026-03-04T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-30612", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-27T00:00:00Z", "date_only": false, "value": "2026-08-27T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-30612", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-27T16:59:32.184Z", "date_only": false, "value": "2026-08-27T16:59:32.184Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2026-30612", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-27T20:17:33Z", "date_only": false, "value": "2026-08-27T20:17:33Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4J2W-5XM5-97RJ", "record": "GHSA-4J2W-5XM5-97RJ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-08-27T20:17:33.780Z", "date_only": false, "value": "2026-08-27T20:17:33.780", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-30612", "record": "FKIE_CVE-2026-30612", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-27T21:31:30Z", "date_only": false, "value": "2026-08-27T21:31:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4J2W-5XM5-97RJ", "record": "GHSA-4J2W-5XM5-97RJ", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T19:24:03.634Z", "date_only": false, "value": "2026-09-01T19:24:03.634565Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-30612", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-09-01T19:24:03.634Z", "date_only": false, "value": "2026-09-01T19:24:03.634565Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-30612", "record": "FKIE_CVE-2026-30612", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-01T19:24:41.599Z", "date_only": false, "value": "2026-09-01T19:24:41.599Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-30612", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-01T19:24:41.599Z", "date_only": false, "value": "2026-09-01T19:24:41.599Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-30612", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-01T20:17:13.257Z", "date_only": false, "value": "2026-09-01T20:17:13.257", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-30612", "record": "FKIE_CVE-2026-30612", "field": "lastModified"}, {"timestamp": "2026-09-01T21:31:26Z", "date_only": false, "value": "2026-09-01T21:31:26Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4J2W-5XM5-97RJ", "record": "GHSA-4J2W-5XM5-97RJ", "field": "modified"}, {"timestamp": "2026-10-10T21:20:13Z", "date_only": false, "value": "2026-10-10T21:20:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/BciQZfyk7OwfiYllOsysM1y6IT0ZQmEP8rQuxoMvOgXczv4", "record": "CVE-2026-30612", "field": "creation_timestamp", "uuid": "669ebcce-5bb0-4a89-ba53-56a801feadb4", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-10T21:20:13Z", "date_only": false, "value": "2026-10-10T21:20:13.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/BciQZfyk7OwfiYllOsysM1y6IT0ZQmEP8rQuxoMvOgXczv4", "record": "CVE-2026-30612", "field": "creation_timestamp", "uuid": "a9453c6c-b9b7-4e4a-8324-b02d6c0b0a99"}, {"timestamp": "2026-10-22T03:25:16Z", "date_only": false, "value": "2026-10-22T03:25:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Qfc0g1mkazQohnTLYxCuwuvGpt3Yp5F-LtyUATiRzKkTyLc", "record": "CVE-2026-30612", "field": "creation_timestamp", "uuid": "bd936b0c-0403-42cf-b2b5-081e3d8220f3", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-22T03:25:16Z", "date_only": false, "value": "2026-10-22T03:25:16.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Qfc0g1mkazQohnTLYxCuwuvGpt3Yp5F-LtyUATiRzKkTyLc", "record": "CVE-2026-30612", "field": "creation_timestamp", "uuid": "ce5e6905-f497-497c-adfc-e252babf2c5e"}, {"timestamp": "2026-10-22T11:26:34Z", "date_only": false, "value": "2026-10-22T11:26:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/EzpZISZcBcoRQZo5SuhEoyY46jIc5Kecd-zGbWfU6APBc9U", "record": "CVE-2026-30612", "field": "creation_timestamp", "uuid": "f1e18946-f70d-4707-9102-3a4a579c913f", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-22T11:26:34Z", "date_only": false, "value": "2026-10-22T11:26:34.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/EzpZISZcBcoRQZo5SuhEoyY46jIc5Kecd-zGbWfU6APBc9U", "record": "CVE-2026-30612", "field": "creation_timestamp", "uuid": "9a33a450-c67b-4870-897e-14071c987133"}, {"timestamp": "2026-10-26T07:56:50.597Z", "date_only": false, "value": "2026-10-26T07:56:50.597260Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3myraq3cozkdh", "record": "CVE-2026-30612", "field": "creation_timestamp", "uuid": "9485b9a2-cfec-49d3-9365-917fdb2f2b3b", "content": "\u653e\u68c4\u3055\u308c\u305f\u300cPopcorn Time\u300d\u30a2\u30d7\u30ea\u3001\u6570\u767e\u4e07\u53f0\u306e\u30c7\u30d0\u30a4\u30b9\u3092RCE\u653b\u6483\u306e\u5371\u967a\u306b\u3055\u3089\u3059\uff08CVE-2026-30612\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/48250/", "url": "https://bsky.app/profile/shiojiri.com/post/3myraq3cozkdh"}, {"timestamp": "2026-10-26T08:12:32.948Z", "date_only": false, "value": "2026-10-26T08:12:32.948048Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3myrbm55hvt2y", "record": "CVE-2026-30612", "field": "creation_timestamp", "uuid": "09ed9eda-2329-4a85-b2d3-e7aa1fa10e0b", "content": "A Popcorn Time updater flaw, CVE-2026-30612, exposed millions of PCs to SYSTEM-level code. Eye Security disabled it on 2M+ systems.\n\n#PopcornTime #Time4Popcorn #CVE202630612 #EyeSecurity #Botnet #SupplyChain #RCE #Malware", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3myrbm55hvt2y"}, {"timestamp": "2026-10-26T15:30:13.558Z", "date_only": false, "value": "2026-10-26T15:30:13.558193Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/duonggiakhanh.com/post/3mys22s5qzq24", "record": "CVE-2026-30612", "field": "creation_timestamp", "uuid": "873eb9c7-5235-454d-823f-4d11a7a2919c", "content": "\ud83d\udc80 The app was abandoned. Its updater kept fetching code over plain HTTP and running it as SYSTEM/root. Eye Security registered the dead domains and pushed 2M+ updates just to switch it off. CVE-2026-30612, an old Popcorn Time fork. Uninstall it. #infosec", "url": "https://bsky.app/profile/duonggiakhanh.com/post/3mys22s5qzq24"}, {"timestamp": "2026-10-26T21:30:07.889Z", "date_only": false, "value": "2026-10-26T21:30:07.889425Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3myso6eqjp72d", "record": "CVE-2026-30612", "field": "creation_timestamp", "uuid": "9cee0295-9504-43e8-8e29-b4c5a7ca0634", "content": "\ud83d\udce2 CVE-2026-30612 : une faille RCE dans Time4Popcorn exposait des millions d'appareils\n\nCet article rapporte la d\u00e9couverte et la rem\u00e9diation d'une vuln\u00e9rabilit\u00e9 critique de type RCE (Remote Code Execution) affectant l'application\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#RCE #Time4Popcorn #Cyberveille", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3myso6eqjp72d"}, {"timestamp": "2026-10-27T07:22:05.812Z", "date_only": false, "value": "2026-10-27T07:22:05.812794Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mytpauylcc2l", "record": "CVE-2026-30612", "field": "creation_timestamp", "uuid": "ec601e0a-4ae1-4139-bfcd-9ec778b155b4", "content": "\ud83c\udf0d \u00c0 l\u2019international (suite)\n\u2022 Time4Popcorn : Une faille RCE (CVE-2026-30612) dans l\u2019application Time4Popcorn expose des millions d\u2019appareils \u00e0 des attaques \u00e0 distance, corrig\u00e9e apr\u00e8s une d\u00e9couverte par Eye Security. (IT-Connect)", "url": "https://bsky.app/profile/cybowl.bsky.social/post/3mytpauylcc2l"}, {"timestamp": "2026-10-27T10:40:24.466Z", "date_only": false, "value": "2026-10-27T10:40:24.466523Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/unnchain.bsky.social/post/3myu2diiect2k", "record": "cve-2026-30612", "field": "creation_timestamp", "uuid": "12543970-5690-4829-a29a-de97fb1e4657", "content": "\u65e7\u30a2\u30d7\u30ea\u300cPopcorn Time\u300d\uff08Time4Popcorn\u7248\uff09\u306e\u66f4\u65b0\u6a5f\u80fd\u306b\u6b20\u9665\uff08CVE-2026-30612\uff09\u3002\u6697\u53f7\u5316\u3082\u7f72\u540d\u78ba\u8a8d\u3082\u306a\u304f\u3001\u901a\u4fe1\u3092\u4e57\u3063\u53d6\u3089\u308c\u308b\u3068Win/Mac\u3067\u6700\u9ad8\u6a29\u9650\u306e\u4efb\u610f\u30b3\u30fc\u30c9\u304c\u52d5\u304f\u4f5c\u308a\u3002\u958b\u767a\u7d42\u4e86\u3067\u30d1\u30c3\u30c1\u306a\u3057\u3002Eye Security\u304c\u7d04200\u4e07\u53f0\u3067\u66f4\u65b0\u6a5f\u80fd\u3092\u6b62\u3081\u305f\u304c\u3001\u672c\u4f53\u306f2014\u5e74\u7248Chrome\u30d9\u30fc\u30b9\u3067\u5371\u967a\u3001Android\u306f\u672a\u5bfe\u51e6\u3002\u5165\u3063\u3066\u3044\u305f\u3089\u524a\u9664\u3092\u3002\nhttps://research.eye.security/cve-2026-30612-a-vulnerability-in-time4popcorn-popcorntime/", "url": "https://bsky.app/profile/unnchain.bsky.social/post/3myu2diiect2k"}], "metrics": {"as_of": "2026-10-29T03:52:25.873Z", "anchors": {"origin": {"timestamp": "2026-08-27T00:00:00Z", "date_only": false, "value": "2026-08-27T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-30612", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-08-27T00:00:00Z", "date_only": false, "value": "2026-08-27T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-30612", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-10-10T21:20:13Z", "date_only": false, "value": "2026-10-10T21:20:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/BciQZfyk7OwfiYllOsysM1y6IT0ZQmEP8rQuxoMvOgXczv4", "record": "CVE-2026-30612", "field": "creation_timestamp", "uuid": "669ebcce-5bb0-4a89-ba53-56a801feadb4", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 3878413.0, "hours": 1077.3369444444445, "days": 44.88903935185185, "min_seconds": 3792013.0, "max_seconds": 3878413.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-27T00:00:00Z", "date_only": false, "value": "2026-08-27T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-30612", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-10T21:20:13Z", "date_only": false, "value": "2026-10-10T21:20:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/BciQZfyk7OwfiYllOsysM1y6IT0ZQmEP8rQuxoMvOgXczv4", "record": "CVE-2026-30612", "field": "creation_timestamp", "uuid": "669ebcce-5bb0-4a89-ba53-56a801feadb4", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 5457145.873287, "hours": 1515.8738536908334, "days": 63.16141057045139, "min_seconds": 5370745.873287, "max_seconds": 5457145.873287, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-27T00:00:00Z", "date_only": false, "value": "2026-08-27T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-30612", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T03:52:25.873Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 1578732.873287, "hours": 438.53690924638886, "days": 18.272371218599538, "min_seconds": 1578732.873287, "max_seconds": 1578732.873287, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-10T21:20:13Z", "date_only": false, "value": "2026-10-10T21:20:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/BciQZfyk7OwfiYllOsysM1y6IT0ZQmEP8rQuxoMvOgXczv4", "record": "CVE-2026-30612", "field": "creation_timestamp", "uuid": "669ebcce-5bb0-4a89-ba53-56a801feadb4", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-29T03:52:25.873Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}