{"metadata": {"vulnerability": "CVE-2026-95102", "count": 22, "kinds": {"milestone": 5, "sighting": 6, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-09-24T16:22:04.106Z", "date_only": false, "value": "2026-09-24T16:22:04.106Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-95102", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-30T17:51:15.493Z", "date_only": false, "value": "2026-09-30T17:51:15.493537Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-26-274-02", "record": "ICSA-26-274-02", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-01T06:00:00Z", "date_only": false, "value": "2026-10-01T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-274-02", "record": "ICSA-26-274-02", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-01T06:00:00Z", "date_only": false, "value": "2026-10-01T06:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-274-02", "record": "ICSA-26-274-02", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-01T06:00:00Z", "date_only": false, "value": "2026-10-01T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-26-274-02", "record": "ICSA-26-274-02", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-02T04:04:28.570Z", "date_only": false, "value": "2026-10-02T04:04:28.570006Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mwuikidpby24", "record": "CVE-2026-95102", "field": "creation_timestamp", "uuid": "4902b13c-7fa4-4e21-8f6b-0127d0b7f268", "content": "~Cisa~\nUnauthenticated WebSockets could enable admin takeover or charging disruption.\n-\nIOCs: CVE-2026-95102, CVE-2026-97363, CVE-2026-97212\n-\n#CVE202695102 #ICS #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3mwuikidpby24"}, {"timestamp": "2026-10-02T21:34:37.182Z", "date_only": false, "value": "2026-10-02T21:34:37.182Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-95102", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-02T21:34:37.182Z", "date_only": false, "value": "2026-10-02T21:34:37.182Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / icscert", "record": "CVE-2026-95102", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-02T22:16:56Z", "date_only": false, "value": "2026-10-02T22:16:56Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JR23-FFQR-CJ5J", "record": "GHSA-JR23-FFQR-CJ5J", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-02T22:16:56.607Z", "date_only": false, "value": "2026-10-02T22:16:56.607", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-95102", "record": "FKIE_CVE-2026-95102", "field": "published"}, {"timestamp": "2026-10-02T23:48:16.168Z", "date_only": false, "value": "2026-10-02T23:48:16.168796Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/d6cp6xyctb7i5", "record": "CVE-2026-95102", "field": "creation_timestamp", "uuid": "f792b610-8c34-4b07-8beb-2ae27b6d30df", "content": "CVE-2026-95102 - Monta monta.app Missing Authentication for Critical Function\nCVE ID : CVE-2026-95102\n \n Published : Oct. 2, 2026, 10:16 p.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate c...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/d6cp6xyctb7i5"}, {"timestamp": "2026-10-03T00:07:24.870Z", "date_only": false, "value": "2026-10-03T00:07:24.870677Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwwlrjel432o", "record": "CVE-2026-95102", "field": "creation_timestamp", "uuid": "2886c22f-e8e3-4523-a7e6-8a7f31c4e6aa", "content": "\ud83d\udea8 CVE-2026-95102 \u2014 CVSS 9.3 CRITICAL\n\nWebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stati...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-95102\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mwwlrjel432o"}, {"timestamp": "2026-10-03T00:31:13Z", "date_only": false, "value": "2026-10-03T00:31:13Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JR23-FFQR-CJ5J", "record": "GHSA-JR23-FFQR-CJ5J", "field": "published"}, {"timestamp": "2026-10-03T00:31:13Z", "date_only": false, "value": "2026-10-03T00:31:13Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JR23-FFQR-CJ5J", "record": "GHSA-JR23-FFQR-CJ5J", "field": "modified"}, {"timestamp": "2026-10-03T03:00:26.824Z", "date_only": false, "value": "2026-10-03T03:00:26.824254Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117374741695395555", "record": "cve-2026-95102", "field": "creation_timestamp", "uuid": "976781cf-e083-4bf2-a11b-50a7ee76af78", "content": "Monta monta.app faces a CRITICAL risk (CVE-2026-95102, CVSS 9.4): missing auth on WebSocket endpoints allows attackers to impersonate charging stations & access sensitive data. Restrict access, monitor traffic. Details: https://radar.offseq.com/threat/cve-2026-95102-cwe-306-in-monta-montaapp-d0effdc35e6b46a2 #OffSeq #CVE202695102 #InfoSec \u26a1\ufe0f", "url": "https://infosec.exchange/users/offseq/statuses/117374741695395555"}, {"timestamp": "2026-10-03T03:00:27.760Z", "date_only": false, "value": "2026-10-03T03:00:27.760096Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwwvgwprap2j", "record": "cve-2026-95102", "field": "creation_timestamp", "uuid": "df98e36b-003e-43a5-8fd2-dfa4c6fefe6d", "content": "CRITICAL vuln in Monta monta.app (CVE-2026-95102, CVSS 9.4): missing WebSocket auth lets attackers impersonate charging stations. Restrict endpoint access & monitor activity. More: https://radar.offseq.com/threat/cve-2026-95102-cwe-306-in-monta-montaapp-d0effdc35e6b46a2 #OffSeq #CVE202695102 #AppSec", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mwwvgwprap2j"}, {"timestamp": "2026-10-03T15:50:22.827Z", "date_only": false, "value": "2026-10-03T15:50:22.827387Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-95102", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-03T15:50:22.827Z", "date_only": false, "value": "2026-10-03T15:50:22.827387Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-95102", "record": "FKIE_CVE-2026-95102", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-03T15:52:54.557Z", "date_only": false, "value": "2026-10-03T15:52:54.557Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-95102", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-03T15:52:54.557Z", "date_only": false, "value": "2026-10-03T15:52:54.557Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-95102", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-03T17:46:02.886Z", "date_only": false, "value": "2026-10-03T17:46:02.886977Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwygwhqh5k2a", "record": "CVE-2026-95102", "field": "creation_timestamp", "uuid": "51d66a89-0de8-42dd-9610-19f03d705686", "content": "\ud83d\udd34 CVE-2026-95102 - Critical (9.4)\n\nWebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate char...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-95102/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwygwhqh5k2a"}, {"timestamp": "2026-10-06T15:15:48.310Z", "date_only": false, "value": "2026-10-06T15:15:48.310", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-95102", "record": "FKIE_CVE-2026-95102", "field": "lastModified"}]}