CVE-2026-97363: high-severity vulnerability in monta.app
Monta monta.app Improper Restriction of Excessive Authentication Attempts
Published · Updated
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.7epss 0.3%
exploitation probability
0.3%top 77% of all CVEs
observed exploitation
nono source reports it
The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks or brute-force attacks to gain unauthorized access.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected products
Monta · monta.appRelated CVEs — monta.app
In the same product, most dangerous first.