# Default 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars

Source: [The Hacker News](https://thehackernews.com/2026/11/default-adminadmin-server-password.html) · 2026-11-09 · Security
Page: https://themorning.dev/story/default-admin-admin-server-password-helps-researchers-hack-two-automakers-unlock-c5154d08fadfed61
Kind: security · Impact: high

## In brief

- Two security researchers found that the login systems behind two car brands' mobile apps could be taken over completely.
- The servers were reachable with the default 'admin:admin' credentials.
- An attacker could access any customer's account and, for a connected car, unlock the doors and start the engine.

## Why it matters

Default credentials on backend systems can expose every customer account and the remote vehicle controls tied to them, so any service built with default logins is at risk.

## Coverage

- [Default 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars](https://thehackernews.com/2026/11/default-adminadmin-server-password.html) — The Hacker News, 2026-11-09

Tags: automotive, default-credentials, authentication, vulnerability, connected-cars

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev