CVE-2026-30612
Critical
Description
An issue in Time4 Popcorn for Windows <= 6.2.1.18 and Time4Popcorn for MacOS <= 6.2.1.17 and Time4Popcorn for Android <= 3.5.0.173 allows a remote attacker to execute arbitrary code via the updater.exe for windows, PT.updd on MacOS components
SeverityCritical
CVSS9.8
Exploit probability—
ProductTime4 Popcorn for Windows
PublishedAug 27, 2026
First seenAug 27, 2026
Weakness typeCWE-494CWE-494
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Time4 Popcorn for Windows | v ≤ 6.2.1.18 | — |
| Time4Popcorn for MacOS | v ≤ 6.2.1.17 | — |
| Time4Popcorn for Android | v ≤ 3.5.0.173 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.