Exploiting Volvo/Eicher's fleet platform to gain control over all users/vehicles

# Summary A critical vulnerability was discovered in Volvo/Eicher's My Eicher fleet management platform used by Indian commercial vehicle operators, where unauthenticated APIs exposed data on 748,000 customers and 676,000 vehicles. The flaw allowed attackers to discover hidden admin APIs that could enable account takeover and grant complete control over entire fleets of trucks and buses. The vulnerability was found by randomly accessing an unprotected API endpoint that inadvertently listed all user-related APIs without requiring authentication.