Tata’s B2B platform returned OTPs in API responses

· Eaton Works · Aug. 24, 2026, 2:38 p.m.
API security Account Takeover security vulnerability B2B Platforms
Summary
Tata's nexarc platform had a serious security vulnerability that allowed OTPs to be decrypted from API responses, posing a risk of account takeovers.
Read full post on eaton-works.com →
AUTHOR
Advertise
Sponsor diff.blog
Put your product in front of developers who read and write about their craft. One exclusive sponsor at a time.
Become a sponsor →
BLOG POST FEATURED ON

Placeholder image
r/netsec

28 points

Add this plugin to your blog