CVE-2026-108863

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 11, 2026

Last Seen

October 11, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CVE-2026-108863: Katanemo Plano Authentication Flaw Exposes Secrets63.0

Katanemo Plano versions up to 0.4.37 have a missing authentication vulnerability in the Envoy admin interface, allowing unauthenticated attackers to access sensitive configuration data on port 9901. This vulnerability, identified as CVE-2026-108863, enables attackers to retrieve API keys in plaintex...