{"vulnerability": "cve-2026-95102", "sightings": [{"uuid": "4902b13c-7fa4-4e21-8f6b-0127d0b7f268", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-95102", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mwuikidpby24", "content": "~Cisa~\nUnauthenticated WebSockets could enable admin takeover or charging disruption.\n-\nIOCs: CVE-2026-95102, CVE-2026-97363, CVE-2026-97212\n-\n#CVE202695102 #ICS #ThreatIntel", "creation_timestamp": "2026-10-02T04:04:28.570006Z"}, {"uuid": "f792b610-8c34-4b07-8beb-2ae27b6d30df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-95102", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/d6cp6xyctb7i5", "content": "CVE-2026-95102 - Monta monta.app Missing Authentication for Critical Function\nCVE ID : CVE-2026-95102\n \n Published : Oct. 2, 2026, 10:16 p.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate c...", "creation_timestamp": "2026-10-02T23:48:16.168796Z"}, {"uuid": "2886c22f-e8e3-4523-a7e6-8a7f31c4e6aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-95102", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwwlrjel432o", "content": "\ud83d\udea8 CVE-2026-95102 \u2014 CVSS 9.3 CRITICAL\n\nWebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stati...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-95102\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-03T00:07:24.870677Z"}, {"uuid": "976781cf-e083-4bf2-a11b-50a7ee76af78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-95102", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117374741695395555", "content": "Monta monta.app faces a CRITICAL risk (CVE-2026-95102, CVSS 9.4): missing auth on WebSocket endpoints allows attackers to impersonate charging stations & access sensitive data. Restrict access, monitor traffic. Details: https://radar.offseq.com/threat/cve-2026-95102-cwe-306-in-monta-montaapp-d0effdc35e6b46a2 #OffSeq #CVE202695102 #InfoSec \u26a1\ufe0f", "creation_timestamp": "2026-10-03T03:00:26.824254Z"}, {"uuid": "df98e36b-003e-43a5-8fd2-dfa4c6fefe6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-95102", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwwvgwprap2j", "content": "CRITICAL vuln in Monta monta.app (CVE-2026-95102, CVSS 9.4): missing WebSocket auth lets attackers impersonate charging stations. Restrict endpoint access & monitor activity. More: https://radar.offseq.com/threat/cve-2026-95102-cwe-306-in-monta-montaapp-d0effdc35e6b46a2 #OffSeq #CVE202695102 #AppSec", "creation_timestamp": "2026-10-03T03:00:27.760096Z"}, {"uuid": "51d66a89-0de8-42dd-9610-19f03d705686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-95102", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwygwhqh5k2a", "content": "\ud83d\udd34 CVE-2026-95102 - Critical (9.4)\n\nWebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate char...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-95102/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-03T17:46:02.886977Z"}]}