Hackers Used Default admin:admin Credentials to Exploit ForgeRock RCE and Remotely Unlock Cars

Researchers used default admin:admin credentials as part of a vulnerability chain that let them run code on two automakers’ production ForgeRock servers and remotely unlock connected cars. Found in early 2026 and disclosed on November 7, the flaws also exposed vehicle locations and supported remote engine commands. The findings came from controlled security research, not […] The post Hackers Used Default admin:admin Credentials to Exploit ForgeRock RCE and Remotely Unlock Cars appeared first on Cyber Security News.

Excerpt shown under the publisher's RSS terms · 46 words · full text and figures are on the publisher's site