TI-2026-65969 CVE-2026-95102 · GHSA-jr23-ffqr-cj5j
Monta monta.app Missing Authentication for Critical Function
Priority MEDIUM 42
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stations.
Vulnerabilities
4 records
TI-2026-65996 CVE-2026-97363 · GHSA-pfh8-7x9x-2rrf
Monta monta.app Improper Restriction of Excessive Authentication Attempts
Priority MEDIUM 44
The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.
TI-2026-65989 CVE-2026-97212 · GHSA-jwgf-7prh-7v76
Monta monta.app Insufficient Session Expiration
Priority LOW 36
The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.
TI-2026-65924 CVE-2026-93474 · GHSA-9x8m-4wcm-v33m
Monta monta.app Insufficiently Protected Credentials
Priority LOW 36
Charging station authentication identifiers are publicly accessible via web-based mapping platforms.