CVE-2026-97363 — Monta monta.app Improper Restriction of Excessive Authentication Attempts
The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denia…
Published: 2026-10-02 · CVSS: 8.7 · CVSS 4.0
The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks or brute-force attacks to gain unauthorized access.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7