CISA Alert: Monta monta.app ICS Critical Authentication Vulnerabilities (CVE-2026-95102)

Vulnerability Overview Vulnerability Name: Monta monta.app Publication Date: October 1, 2026 Alert Code: ICSA-26-274-02 Related Topics: Industrial Control Systems Vulnerabilities, Industrial Control Systems Impact Scope Affected Versions: All versions of monta.app (CVE-2026-95102, CVE-2026-97363, CVE-2026-97212, CVE-2026-93474) CVSS Score: v3 9.4 Vendor: Monta Device: Monta monta.app Vulnerability Details: - Missing critical function authentication - Improper throttling of authentication attempts - Insufficient session expiration - Inadequate credential protection Remediation Recommended Practices: - Minimize the network exposure of all control system devices and/or systems, ensuring they are not accessible via the Internet. - Place control system networks and remote devices behind firewalls and isolate them from business networks. - When remote access is required, use more secure communication methods, such as Virtual Private Networks (VPNs), and recognize that VPNs may contain vulnerabilities; update to the latest version. - Conduct appropriate impact analysis and risk assessment before deploying mitigations. - Implement recommended cybersecurity policies to proactively defend ICS assets. - Follow internal procedures to report suspicious malicious activity and report findings to CISA. Additional Information Background: - Critical Infrastructure Sector: Energy, Transportation Systems - Deployment Countries/Regions: Global - Company Headquarters Location: Netherlands Acknowledgments: - An anonymous researcher reported these vulnerabilities to CISA. Legal Notice and Terms of Use: - This product is subject to this notice and the Privacy and Use Policy. Revision History: - Initial Publication Date: 2026-10-01 Tags Industry: Energy Industry, Transportation Systems Industry Topic: Industrial Control Systems Vulnerabilities, Industrial Control Systems Related Advisories ABB Protection and Control IED Manager PCM600 CISA Malcolm Armatura LLC Armatura One Johnson Controls EasyIO Neo Series EC and CW Controllers Feedback Please share your thoughts: We have recently updated our anonymous product survey and welcome your feedback. Contact Information CISA Central: 1-844-Say-CISA, contact@cisa.dhs.gov Footer CISA.gov: Official website of the U.S. Department of Homeland Security About CISA: Budget and Performance, DHS.gov, FOIA Requests, No FEAR Act, Office of Inspector General, Privacy Policy, Subscribe, White House, USA.gov, Website Feedback --- Note: No POC code or exploit code is included in this page.

Goal Reached Thanks to every supporter — we hit 100%!

CISA Alert: Monta monta.app ICS Critical Authentication Vulnerabilities (CVE-2026-95102)

More from this source