CVE-2026-97363

High7.5 Published on Oct 2, 2026

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks or brute-force attacks to gain unauthorized access.

CVSS score7.5 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness type (CWE)CWE-307

Vulnerabilities

Four Monta Platform Flaws Put Charging-Station Access and Availability at Risk

CISA warns four Monta monta.app flaws (CVSS 9.4) allow station impersonation, credential exposure, DoS and unauthorized charging control.

Oct 2, 202611:32 4 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Four Monta Platform Flaws Put Charging-Station Access and Availability at Risk