Cox Biz Auth-Bypass Bug Exposes Millions of Devices to Takeover

Researcher Sam Curry discovered an authorization-bypass flaw in Cox Communications' back-end API infrastructure that allowed replaying HTTP requests across more than 700 exposed endpoints to obtain business-customer UUIDs, PII, device MAC addresses, Wi‑Fi passwords, and to execute commands or take over modems; the issue was rooted in a Spring proxying error, was reported on March 4 and patched by Cox the next day, and Cox reported no evidence of abuse.