News for hackers. Stuff that matters.

A comment on Exploiting Volvo/Eicher's fleet platform to gain control over all users/vehicles.

Re:Exploiting Volvo/Eicher's fleet platform to gain control ... by darknavi on Monday July 27, 2026 @01:43PM (#49073098)
> November 3, 2025: Reported.

> November 10, 2025: No response, followed up.

> November 17, 2025: No response, followed up and copied some additional people on the thread.

> November 20, 2025: It was no longer possible to access any of the internal APIs. The primary vulnerability was now fixed.

> July 27, 2026: Published

Quite the generous timeline on this person's behalf.

[ Parent | on HN ]
Re:Exploiting Volvo/Eicher's fleet platform to gain control ... by greyface- on Monday July 27, 2026 @04:14PM (#49074982)
And terrible (non-)response from VECV, if they have any interest in receiving timely disclosure from future researchers.
[ Parent | on HN ]
Re:Exploiting Volvo/Eicher's fleet platform to gain control ... by r_lee on Monday July 27, 2026 @06:46PM (#49076499)
reminder, these vendors like Volvo etc., don't really want you to report vulns, you should just sell them to a broker instead and get some actual money as well, it's a win win.
[ Parent | on HN ]
Re:Exploiting Volvo/Eicher's fleet platform to gain control ... by mpdpsycho on Monday July 27, 2026 @07:07PM (#49076765)
I don’t know why particularly here over elsewhere, but this thought really makes me feel disappointment in the whole chain of humans responsible for the cost optimization away of product integrity.

Though in this case, with all the tracking being thrown into newer cars, maybe a bit of a gap is a good thing for the future. Jailbreaking vehicles would be a cool thing to see become widespread.

[ Parent | on HN ]
Re:Exploiting Volvo/Eicher's fleet platform to gain control ... by r_lee on Tuesday July 28, 2026 @01:11PM (#49086962)
there's no point in being moral when these companies with their immense resources will just ignore you or refuse to give a measly bounty

things won't change until they have to make an effort

[ Parent | on HN ]
Re:Exploiting Volvo/Eicher's fleet platform to gain control ... by voakbasda on Wednesday July 29, 2026 @09:40AM (#49097404)
This. If they don’t feel pressure to pay, they won’t.

More people should make them pay.

[ Parent | on HN ]
Re:Exploiting Volvo/Eicher's fleet platform to gain control ... by cromka on Monday July 27, 2026 @07:06PM (#49076742)
reminder, Volvo is Chinese.
[ Parent | on HN ]
Re:Exploiting Volvo/Eicher's fleet platform to gain control ... by loloquwowndueo on Monday July 27, 2026 @07:56PM (#49077327)
How so? Sources?
[ Parent | on HN ]
Re:Exploiting Volvo/Eicher's fleet platform to gain control ... by solarkraft on Monday July 27, 2026 @08:18PM (#49077570)
Geely bought it from Ford in 2010.

https://www.reuters.com/article/business/geely-signs-18-bill...

[ Parent | on HN ]
Re:Exploiting Volvo/Eicher's fleet platform to gain control ... by dhathorn on Monday July 27, 2026 @08:33PM (#49077698)
That would be Volvo cars. tfa is about Volvo group, which is Swedish and makes among other things Volvo trucks. (Or HGVs as they might be called in Europe)
[ Parent | on HN ]
Re:Exploiting Volvo/Eicher's fleet platform to gain control ... by cromka on Monday July 27, 2026 @08:47PM (#49077806)
Oh, fair. I assumed this was consumer cars.
[ Parent | on HN ]
Re:Exploiting Volvo/Eicher's fleet platform to gain control ... by solarkraft on Wednesday July 29, 2026 @03:28PM (#49101892)
Oh, great point!
[ Parent | on HN ]
Re:Exploiting Volvo/Eicher's fleet platform to gain control ... by johanmrtnsn on Tuesday July 28, 2026 @05:37AM (#49081499)
Are you thinking about Volvo cars? There are two Volvo companies, Volvo cars and Volvo group. This seems to be about Volvo group which makes commercial vehicles like trucks and busses.
[ Parent | on HN ]
Re:Exploiting Volvo/Eicher's fleet platform to gain control ... by ashu1461 on Tuesday July 28, 2026 @08:56AM (#49083094)
Also the exploit is not directly via volvo but with a third party
[ Parent | on HN ]