Tata’s B2B Platform Flaw Enables Account Takeover Just by Knowing Victim’s Phone

CERT-In acknowledged the report the same day and confirmed the issue was fixed on July 31, 2026. The vulnerable otpGeneratedForMobile field was …

Source: Cybersecurity News