Read the docs

Versa

Records25All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

Versa records in CISA KEV
TI-2025-24195 Versa Concerto Improper Authentication Vulnerability Priority CRITICAL 97KEV 2026-01-22TI-2024-26638 Versa Director Dangerous File Type Upload Vulnerability Priority CRITICAL 91KEV 2024-08-23

Components

Products in the NVD configurations · select one to filter the records
Versa Director 16 records CRITICAL Versa Operating System 4 records MEDIUM Concerto 3 records CRITICAL Versa Analytics 2 records LOW Sase Client 1 record LOW

Records

3 records in Concerto · all components

TI-2025-24195 CVE-2025-34026 · GHSA-h2mm-jj4p-hm2p

Versa Concerto Actuator Authentication Bypass Information Leak

Priority CRITICAL 97KEV

The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.8178 Published 2025-05-21 No fix listed CWE-288
TI-2025-24196 CVE-2025-34027 · GHSA-96gf-3rqf-c8m9

Versa Concerto Authentication Bypass File Write Remote Code Execution

Priority HIGH 79

The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.46402 Published 2025-05-21 No fix listed CWE-367
TI-2025-24194 CVE-2025-34025 · GHSA-x5xg-rmf4-2q22

Versa Concerto Insecure Docker Mount Container Escape

Priority MEDIUM 40

The Versa Concerto SD-WAN orchestration platform is vulnerable to an privileges escalation and container escape vulnerability caused by unsafe default mounting of host binary paths that allow the container to modify host…

CVSS 4.0HIGH 8.6 Local High privileges No interaction EPSS 0.0061 Published 2025-05-21 No fix listed CWE-732
Open these records in search →