Security flaws in a carmaker’s web portal let one hacker remotely unlock cars from anywhere

A security researcher uncovered critical vulnerabilities in a major carmaker’s dealership web portal that allowed unauthorized creation of a national admin account. This access enabled full control over customer and vehicle data.