Researchers used default admin:admin credentials as part of a vulnerability chain that let them run code on two automakers’ production ForgeRock servers and remotely unlock connected cars. Found in early 2026 and disclosed on November 7, the flaws also exposed vehicle locations and supported remote engine commands. The findings came from controlled security research, not […]
Read the original article:
Hackers Used Default admin:admin Credentials to Exploit ForgeRock RCE and Remotely Unlock Cars
