Which monta.app versions are affected by CISA’s October 01, 2026 advisory?
CISA’s October 01, 2026 ICS advisory says the affected monta.app versions are the listed versions connected to four CVEs. The context provided does not include the exact version numbers, so operators should check CISA’s advisory for the full list.
Which versions are affected?
The advisory covers all listed monta.app versions tied to these vulnerabilities:
- CVE-2026-95102
- CVE-2026-97363
- CVE-2026-97212
- CVE-2026-93474
The available summary confirms that CISA identified affected versions, but it does not reproduce the version-by-version list.
Who should check exposure?
CISA lists the affected critical infrastructure sectors as:
- Energy
- Transportation Systems
The advisory also says deployments are worldwide and the company is headquartered in the Netherlands.
What to verify next
If you operate or support monta.app-connected charging stations, compare your deployed version against CISA’s advisory itself. Version details can change through updates or later vendor guidance, so use the current CISA page as the reference point.
What should operators of vulnerable monta.app charging stations do after the CISA advisory?
Operators should first confirm whether their monta.app deployment matches the affected versions listed in CISA’s October 01, 2026 advisory. The advisory links the issue to risks involving administrative control and charging service availability.
What operators should do first
Start with version exposure:
- Check the installed or deployed monta.app version.
- Compare it with the affected versions listed in CISA’s advisory.
- Pay attention to the four CVEs named by CISA: CVE-2026-95102, CVE-2026-97363, CVE-2026-97212, and CVE-2026-93474.
The provided context does not include patch instructions, mitigation steps, or vendor update details. For those, use the CISA advisory directly.
Why the advisory matters
CISA warned that exploitation could let attackers gain unauthorized administrative control over vulnerable charging stations.
The advisory also says attackers could interrupt charging services through denial-of-service attacks. For operators, that means the risk is not only account or system access; service continuity may also be affected.
What to monitor
The advisory applies to Energy and Transportation Systems sectors, with deployments worldwide. Because security guidance can be updated, operators should re-check the CISA page before making final remediation decisions.
How could CVE-2026-95102 affect monta.app WebSocket endpoints?
CVE-2026-95102 affects monta.app by involving WebSocket endpoints that CISA says lack proper authentication. That could let attackers impersonate charging stations and take actions they should not be allowed to take.
How the WebSocket issue works
CISA describes the issue as WebSocket endpoints without proper authentication.
In practical terms, the concern is that an attacker could pose as a charging station. If the system accepts that connection or message as legitimate, the attacker could perform unauthorized actions.
What the possible impact is
The broader advisory warns that exploitation could lead to unauthorized administrative control over vulnerable charging stations.
CISA also warns about the possibility of interrupted charging services through denial-of-service attacks. The provided context does not say that CVE-2026-95102 alone causes every listed impact, but it does describe impersonation and unauthorized actions for that specific CVE.
What to check
Operators should review whether their monta.app versions are among the versions listed by CISA for CVE-2026-95102 and the related CVEs. Since advisory details may be revised, check CISA’s current notice before relying on any saved copy.
Sources / Learn more
Related reading
- Which monta.app versions are affected by the October 01, 2026 CISA advisory?; What should operators of vulnerable Monta charging stations do after the CISA advisory?; How could unauthenticated WebSocket endpoints affect Monta charging stations?; What is the potential impact of CVE-2026-95102, CVE-2026-97363, CVE-2026-97212, and CVE-2026-93474 on Monta deployments?
- What should operators of monta.app charging stations do after CISA’s October 01, 2026 ICS advisory?; Which monta.app versions are affected by the CISA-listed vulnerabilities?; How could the monta.app vulnerabilities affect charging services?
Leave a Reply