[ Vendor · 4 CVEs ]
Tata Motors
CVEs affecting Tata Motors published in the last 30 days, plus any Tata Motors CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-121146 | 4 Nov 2026 | CVSS 6.8 | Tata Motors iRA 2.0This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to the recording of authentication tokens in application logs used for… | |
| CVE-2026-121147 | 4 Nov 2026 | CVSS 8.5 | Tata Motors iRA 2.0This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to improper implementation of SSL certificate pinning in the network… | |
| CVE-2026-121144 | 4 Nov 2026 | CVSS 8.8 | Tata Motors iRA 2.0This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to presence of hardcoded service account credentials, API Keys and… | |
| CVE-2026-121145 | 4 Nov 2026 | CVSS 7.1 | Tata Motors iRA 2.0This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to insufficient validation of URLs and origins loaded within the WebView… |