Tata’s B2B platform returned OTPs in API responses

· Eaton Works · Aug. 24, 2026, 2:38 p.m.
security vulnerability API security Account Takeover B2B Platforms
Summary
Tata's nexarc platform had a serious security vulnerability that allowed OTPs to be decrypted from API responses, posing a risk of account takeovers.
Read full post on eaton-works.com →
AUTHOR
Sponsored
Zulip logo Zulip
Organized team chat for people who take work seriously. Topic-based threading keeps conversations focused.
Try Zulip
Become a sponsor →
BLOG POST FEATURED ON

Placeholder image
r/netsec

28 points

Add this plugin to your blog