Poland’s Public Digital Infrastructure Exposes Over 10,000 Vulnerabilities: Airports, Hospitals, and Courts at Risk

In Poland, two security researchers uncovered thousands of critical flaws while testing the cyber resilience of public websites.

Cyber Audit Findings: Over 10,000 Public Entities Exposed

During a presentation at the Def Con conference, Robert Kruczek and Kamil Szczurowski disclosed that they identified security issues across 10,000 public entities and 250,000 websites.

High‑Impact Gaps: Airports, Hospitals and Courts

■300 public sites were accessible without authentication due to a single exploit.

■245 court systems face a dual‑layer vulnerability that could be compromised.

■Airports and hospitals share the same weaknesses, raising the risk of service disruption.

Software & Support Deficiencies: Pad CMS Reaches End‑of‑Life

The researchers pinpointed a critical flaw in the widely used Pad CMS content‑management system. With the platform officially “end‑of‑life” and unsupported, 300 public sites remain unpatched.

Systemic Gaps in Vulnerability Reporting

■Most vendors dismissed reported bugs as “inconveniences,” providing inadequate responses.

■The lack of bug‑bounty programs delayed rapid remediation.

■Official channels used for disclosure resulted in prolonged resolution timelines.

Potential Economic and Operational Ramifications

■Service interruptions could incur millions of euros in losses.

■Rising cyber‑attack threats may erode foreign investor confidence and negatively impact Poland’s BIST performance.

■Long‑term infrastructure upgrades could require €2‑3 billion in additional spending.

Deniz Arslan – Security gaps threaten not only data integrity but also the operational continuity of critical infrastructure. Prompt remediation in Poland will lower the regional cyber‑risk profile and restore investor confidence. In the short term, such disclosures may steer markets cautiously; over the longer horizon, enhanced cyber resilience can spawn new opportunities in public‑private partnership models.