CVE-2026-93474

CVE-2026-93474 is an insufficiently protected credentials issue (CWE-522) in which charging-station authentication identifiers are publicly accessible through web-based mapping platforms. Related reporting points to Monta (monta.app); no affected version range is stated in the provided data. The identifiers are reachable over the network without privileges or user interaction. Exposure can compromise confidentiality and integrity of the related charging-station function; availability impact is not indicated. No public proof of concept is known and the CVE is not in CISA KEV.

What to do: Treat charging-station authentication identifiers published on web mapping platforms as exposed and rotate or revoke them. Stop publishing those identifiers, restrict map and API access to station credentials, and follow Monta and ICS-CERT guidance for configuration or product fixes. Inventory which stations and operator accounts are in scope, because no patched version range is given in the available data.