Plano vulnerabilities

1 known vulnerability in Plano from Katanemo. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Plano: Missing Authentication for Critical Functionality

  CVE-2026-108863Oct 11, 2026Katanemo

  Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the Envoy admin interface, which is bound to all host interfaces on port 9901. Attackers can request the /config_dump endpoint