iRA 2.0

Mentions · 7d2
Mentions · 30d2
All mentions2
First seenNov 5, 2026
Last mentioned5d ago

Timeline

2 articles · newest first

Tata Motors iRA app contains hardcoded credentials

CERT-In reports flaws in Tata Motors connected vehicle apps that enable credential extraction and unauthorized access.

Hacker News · securityNov 6, 07:28 UTC · 5d agoVulnerability 2 sources HN 20 points · 5 commentsCVE-2026-121144 CVE-2026-1211451

Tata Motors iRA apps have credential theft flaws

CERT-In rates four flaws in Tata Motors iRA 2.0 and iRA.ev apps as high severity allowing credential theft and owner impersonation.

Cyber Security Newsupdated Nov 6, 07:28 UTC · 5d agofirst Nov 5, 10:41 UTC · 6d agoVulnerability 2 sourcesCVE-2026-121144 CVE-2026-121145 CVE-2026-121146+11

Related CVEs

by mentions

CVE-2026-1211448.8
Hardcoded credentials in iRA 2.0 and iRA.ev mobile apps
published 7d agoiRA mobile applications
CVE-2026-1211457.1
WebView URL validation in iRA 2.0 and iRA.ev apps
published 7d agoiRA 2.0
CVE-2026-1211478.5
Ineffective SSL Certificate Pinning in iRA 2.0 and iRA.ev Mobile Apps
published 7d agoiRA 2.0
CVE-2026-1211466.8
Auth token exposure in Tata iRA 2.0 and iRA.ev mobile apps
published 7d agoTata Motors iRA

Appears with

CERT-Inorganization · 2
Tata Motorsvendor · 2
iRA.evproduct · 1
iRA.ev appsproduct · 1

Entities are extracted by the model from each article. First seen Nov 5, 2026, last mentioned 5d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.