Tata Motors vulnerabilities
We track 3 vulnerabilities in Tata Motors products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 4, 2026.
Latest Tata Motors vulnerabilities
- 8.5 High severity
Tata Motors iRA 2.0: Improper Certificate Validation
This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to improper implementation of SSL certificate pinning in the network security configuration, resulting in ineffective certificate pinning controls. An attacker positioned to intercept
- 7.1 High severity
Tata Motors iRA 2.0: Origin Validation Error
This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to insufficient validation of URLs and origins loaded within the WebView component. A remote attacker could exploit this vulnerability by sending malicious web content to the affected
- 8.8 High severity
Tata Motors iRA 2.0: Use of Hard-coded Credentials
This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to presence of hardcoded service account credentials, API Keys and authorization tokens within the application package. An unauthenticated remote attacker could exploit this vulnerabil