Our takeCISA reports active exploitation in Monta monta.app charging stations (CVEs-2026-95102, -97363, -97212, -93474). Successful attacks can yield admin control or DoS. Patch immediately if you operate or rely on these stations.Cyber Resilience desk
Sources (1)
- cisa_advisories · cisa_advisories
What this means for you — Security leader:CISA reports active exploitation of four vulnerabilities in Monta app (monta.app) that can give attackers admin control over EV charging stations or trigger DoS. If you operate or rely on Monta charging infrastructure, treat this as an emergency patch and isolate affected stations until updated.
What this means for you — Lean IT orgs:If your business uses Monta charging stations, check with the operator or vendor right now for the update — these flaws let attackers take control or shut them down.
What this means for you — MSP:CISA reports active exploitation in Monta app (monta.app) affecting all versions; flaws enable admin takeover or DoS on EV charging stations. Check every client with Monta gear immediately, apply the vendor update, and segment the stations from the rest of the network.
What this means for you — Researcher:CISA reports active exploitation of four CVEs in monta.app (all versions) that can grant unauthorized admin control over charging stations or cause DoS. See the CSAF for technical details.