Hacker NewsDec 19

Reverse Engineering Major US Airline's PNR System and Accessing All Reservations

https://alexschapiro.com/security/vulnerability/2025/11/20/avelo-airline-reservation-api-vulnerability

#HackerNews #ReverseEngineering #AirlineSecurity #PNRSystem #Vulnerability #Cybersecurity #AveloAirlines

Brute-Forceable Airline Reservation API Left Millions of Passenger Records Vulnerable

Timeline & Responsible Disclosure

Alex Schapiro