Hardcoded credentials and other issues in Tata Motors App(cert-in.org.in)
73 points by qtqtqt | 15 comments
CERT-In vulnerability note CIVN-2026-0537 describing four high-severity flaws, including hardcoded credentials, in Tata Motors' iRA 2.0 and iRA.ev connected-car apps.