Our takeCISA reports active exploitation in Monta app charging stations (CVE-2026-95102 and three others). Successful attacks let attackers take admin control or knock the stations offline. Patch immediately if you operate or depend on these chargers.Cyber Resilience desk
Sources (1)
- cisa_ics · cisa_ics
What this means for you — Security leader:CISA reports active exploitation of four vulnerabilities in Monta monta.app charging station software (CVE-2026-95102, CVE-2026-97363, CVE-2026-97212, CVE-2026-93474). If you operate or rely on these EV charging systems, treat this as an emergency change: apply vendor patches immediately and isolate affected stations from the internet until updated.
What this means for you — Lean IT orgs:If your business uses Monta monta.app charging stations, update the software right away using the vendor’s instructions. Until it’s patched, keep the stations offline or on a locked-down network to stop remote takeover or service disruption.
What this means for you — MSP:CISA reports active exploitation in Monta monta.app charging station software across four CVEs. Review every client with EV charging infrastructure, confirm version exposure, push the available patches on an emergency basis, and segment or air-gap stations until remediated.
What this means for you — Researcher:CISA advisory ICSA-26-274-02 details four vulnerabilities in Monta monta.app (all versions) with confirmed in-the-wild exploitation that can yield administrative control or DoS on EV charging stations.