Wyndham Hotels left a hardcoded credential in its customer-facing app, exposing sensitive customer data to anyone who discovered it. The company declined to confirm whether it has detected any past unauthorized access to the affected system.
Background
Hardcoded credentials in applications are a persistent OWASP Top 10 risk that allows attackers to bypass authentication entirely without exploiting a traditional vulnerability. Large enterprises like Wyndham remain frequent targets due to the volume of personal and payment data they store.
- Source
- TechCrunch
- Published
- Nov 10, 2026 at 07:03 AM
- Score
- 7.0 / 10