Skip to content
OpenAdvisories
High · 7.5 CVE-2026-97363 EUVD-2026-91822GHSA-pfh8-7x9x-2rrf

Monta monta.app Improper Restriction of Excessive Authentication Attempts

Published Oct 2, 2026 · Updated Oct 3, 2026 · Assigned by icscert

Description

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks or brute-force attacks to gain unauthorized access.

Affected products

VendorProductAffectedFixed
Monta monta.app All versions —

Advisories 1

References