Security Flaws In Carmaker's Web Portal Let a Hacker Remotely Unlock Cars

Three years after discovering a vulnerability in Jacuzzi’s SmartTub interface, security researcher Eaton Zveare revealed flaws in a major carmaker’s dealership portal that exposed customer data and could allow hackers to remotely access vehicles. The vulnerabilities stemmed from simple API issues, granting unauthorized access to sensitive information and real-time vehicle tracking, which were fixed in February 2025.

Want More Context? 🔎