These vulnerabilities, which have been classified as "high severity," could be exploited by attackers to gain control of vulnerable devices, steal sensitive information, or disrupt operations.

In a communication posted on its website, the airline apologized to its customers for the data breach and the incident has been "self-reported" to the nodal agency, the Indian Computer Emergency Response Team (CERT-In).