CTI · reviewed · 2026-10-03

CVE-2026-95102 Monta WebSocket authentication bypass

Full story & timeline

MITRE ATT&CK

• T1190 Exploit Public-Facing Application Initial Access

Indicators

No curated indicators tied to this case.

Detections

No detection content yet — case analysis did not yield signal-specific telemetry. Check back after the next daily CTI pass.

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-02
• https://radar.offseq.com/threat/cve-2026-95102-cwe-306-in-monta-montaapp-d0effdc35e6b46a2
• https://dev.to/max_bayern_b89482c0faf779/monta-ev-charging-flaws-chargers-can-be-impersonated-cvss94-4pkj