Tata’s B2B platform returned OTPs in API responses
https://ift.tt/BPgRGzc
Submitted 2026-08-24T14:33:25Z by EatonZ
via reddit https://ift.tt/EtI1TAk
Eaton-Works
Tata’s B2B platform returned OTPs in API responses
Tata’s nexarc platform had a vulnerability where OTPs could be decrypted from API responses, making it easy to take over any account.
August 24, 2026 307 3
