Monta

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Monta records in CISA KEV

No Monta vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2026-65996 CVE-2026-97363 · GHSA-pfh8-7x9x-2rrf

Monta monta.app Improper Restriction of Excessive Authentication Attempts

MEDIUM 44

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00321 Published 2026-10-02 No fix listed CWE-307

TI-2026-65969 CVE-2026-95102 · GHSA-jr23-ffqr-cj5j

Monta monta.app Missing Authentication for Critical Function

MEDIUM 42

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stations.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00362 Published 2026-10-02 No fix listed CWE-306

TI-2026-65989 CVE-2026-97212 · GHSA-jwgf-7prh-7v76

Monta monta.app Insufficient Session Expiration

LOW 36

The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00249 Published 2026-10-02 No fix listed CWE-613

TI-2026-65924 CVE-2026-93474 · GHSA-9x8m-4wcm-v33m

Monta monta.app Insufficiently Protected Credentials

LOW 36

Charging station authentication identifiers are publicly accessible via web-based mapping platforms.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00202 Published 2026-10-02 No fix listed CWE-522

Open these records in search →

Critical	1
High	1
Medium	2
Low	0
No CVSS	0