--- title: Security researchers scanned the Polish web and found... description: Two Polish security researchers presented findings at DEF CON revealing that over 10,000 public entities and 250,000 websites in Poland have security flaws,... canonical: https://daily.dev/posts/security-researchers-scanned-the-polish-web-and-found-courts-hospitals-and-airports-at-risk-of-hac-evhbbtunt twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Security researchers scanned the Polish web and found courts, hospitals, and airports at risk of hacks | daily.dev og:description: Two Polish security researchers presented findings at DEF CON revealing that over 10,000 public entities and 250,000 websites in Poland have security flaws,... og:url: https://daily.dev/posts/security-researchers-scanned-the-polish-web-and-found-courts-hospitals-and-airports-at-risk-of-hac-evhbbtunt og:image: https://api.daily.dev/og/posts/EVHBbTUnT.png og:image:alt: Security researchers scanned the Polish web and found courts, hospitals, and airports at risk of hacks og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Security researchers scanned the Polish web and found courts, hospitals, and airports at risk of hacks **[TechCrunch](https://daily.dev/sources/tc)** · 2 min read · 0 upvotes · 0 comments ## Summary Two Polish security researchers presented findings at DEF CON revealing that over 10,000 public entities and 250,000 websites in Poland have security flaws, including airports, hospitals, and government offices. Key vulnerabilities were found in Pad CMS, an end-of-life content management system, which allowed unauthenticated access to over 300 public websites. A separate bug gave access to roughly 245 Polish courts — about two-thirds of the country's judiciary. The research highlights systemic issues: buggy vendor software, absent bug bounty programs, and vendors dismissing reports as inconveniences. Findings were reported through official government channels. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What vulnerabilities were found in Pad CMS and how many sites were affected? Critical vulnerabilities in Pad CMS allowed unauthenticated access to over 300 public websites without a password. The software developer declined to patch the flaws because the product had reached end-of-life status. A separate bug in another web system exposed the websites of approximately 245 Polish courts, representing about two-thirds of Poland's entire judiciary. _Teams still running end-of-life CMS software can track emerging disclosures like these on daily.dev before they become incidents._ ## Similar posts on daily.dev - [Russian hackers breached Polish power grid thanks to bad security, report says](https://daily.dev/posts/russian-hackers-breached-polish-power-grid-thanks-to-bad-security-report-says-ot56oi0pf) · TechCrunch · 0 upvotes · 0 comments - [European governments: 3.000 tracking sites, 1.000 phpMyAdmins, and 99% poorly encrypted email. Introducing SecurityBaseline.eu](https://daily.dev/posts/european-governments-3-000-tracking-sites-1-000-phpmyadmins-and-99-poorly-encrypted-email-intro-qh01zffym) · Hacker News · 0 upvotes · 0 comments - [Vulnerabilities Expose Private Data in Indian Government Systems](https://daily.dev/posts/vulnerabilities-expose-private-data-in-indian-government-systems-4e1trriep) · Dark Reading · 1 upvotes · 0 comments - [Security boffins harvest bumper crop of API keys from web](https://daily.dev/posts/security-boffins-harvest-bumper-crop-of-api-keys-from-web-56ku6ambh) · The Register · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#cms](https://daily.dev/tags/cms) [View this post on daily.dev](https://daily.dev/posts/security-researchers-scanned-the-polish-web-and-found-courts-hospitals-and-airports-at-risk-of-hac-evhbbtunt) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Security researchers scanned the Polish web and found courts, hospitals, and airports at risk of hacks","url":"https://daily.dev/posts/security-researchers-scanned-the-polish-web-and-found-courts-hospitals-and-airports-at-risk-of-hac-evhbbtunt","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/security-researchers-scanned-the-polish-web-and-found-courts-hospitals-and-airports-at-risk-of-hac-evhbbtunt"},"datePublished":"2026-08-07T21:04:02.770Z","dateModified":"2026-08-07T21:04:25.460Z","description":"Two Polish security researchers presented findings at DEF CON revealing that over 10,000 public entities and 250,000 websites in Poland have security flaws,...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/475f9ecd485a52e99dd84939a978b832?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/475f9ecd485a52e99dd84939a978b832?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"TechCrunch","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"TechCrunch","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/tc","url":"https://daily.dev/sources/tc"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/security-researchers-scanned-the-polish-web-and-found-courts-hospitals-and-airports-at-risk-of-hac-evhbbtunt","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cyber,cms","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"TechCrunch","item":"https://daily.dev/sources/tc"},{"@type":"ListItem","position":3,"name":"Security researchers scanned the Polish web and found courts, hospitals, and airports at risk of hacks"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/security-researchers-scanned-the-polish-web-and-found-courts-hospitals-and-airports-at-risk-of-hac-evhbbtunt#faq","mainEntity":[{"@type":"Question","name":"What vulnerabilities were found in Pad CMS and how many sites were affected?","acceptedAnswer":{"@type":"Answer","text":"Critical vulnerabilities in Pad CMS allowed unauthenticated access to over 300 public websites without a password. The software developer declined to patch the flaws because the product had reached end-of-life status. A separate bug in another web system exposed the websites of approximately 245 Polish courts, representing about two-thirds of Poland's entire judiciary. Teams still running end-of-life CMS software can track emerging disclosures like these on daily.dev before they become incidents."}}]} ```