Polish security researchers Robert Kruczek and Kamil Szczurowski found widespread weaknesses across the country’s public-facing websites, affecting courts, hospitals, airports and government bodies. Their findings matter because easily exploited flaws could allow attackers to disrupt or take over essential public services, at a time when Poland is strengthening defences after suspected Russian cyberattacks on energy and water providers.

The researchers identified more than 10,000 affected public entities and 250,000 websites with security issues. Vulnerabilities in the unsupported Pad CMS reportedly exposed over 300 public websites without passwords, while another flaw gave access to roughly 245 courts, about two-thirds of Poland’s judiciary; the pair reported the problems through official government channels.