negativeSYS.SOURCE: shubs.io• 2026-11-09T00:10:50Z
Security Vulnerabilities in X Brand's Connected Car Systems Allow Remote Access
The article details the discovery of hardcoded API keys and admin credentials in X brand's connected car systems, enabling unauthorized access to vehicle control functions. It outlines the exploitation of ForgeRock's OpenIDM identity management platform and bypassing of WAF protections to remotely unlock vehicles.
*** END OF TRANSMISSION ***