Vendor
Versa
21 known vulnerabilities.
Versa at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 6 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 9 | 2 |
| May 2025 | 3 | 2 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Products
Latest advisories
-
Critical max 9.8VA-25-169-01 9 CVEs
Versa Networks Versa Director multiple vulnerabilities
Versa Networks Versa Director contains a variety of vulnerabilities. In the most severe cases, a remote, unauthenticated attacker could execute arbitrary code with administrative privileges.
21 results · Feed
-
Unscored —
The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the VO…
-
High 7.6
The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the VO…
-
Unscored —
Versa has confirmed a buffer overflow vulnerability in the IPsec implementation on VOS, aka Versa FlexVNF. Buffer Over…
-
High 7.6
The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the VO…
-
High 7.6
The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the VO…
-
High 7.6
The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the VO…
-
Critical 9.8
The Versa Director software exposes a number of services by default and allow attackers an easy foothold due to default…
-
Medium 6.1
The Versa Director SD-WAN orchestration platform provides functionality to upload various types of files. However, the …
-
Critical 9.8
The Versa Director SD-WAN orchestration platform which makes use of Cisco NCS application service. Active and Standby D…
-
High 7.2
The Versa Director SD-WAN orchestration platform provides an option to upload various types of files. The Versa Directo…
-
Medium 6.3
The Versa Director SD-WAN orchestration platform implements Two-Factor Authentication (2FA) using One-Time Passcodes (O…
-
High 7.2
The Versa Director SD-WAN orchestration platform includes a Webhook feature for sending notifications to external HTTP …
-
High 7.5
The Versa Director SD-WAN orchestration platform provides direct web-based access to uCPE virtual machines through the …
-
Medium 6.7
The Versa Director SD-WAN orchestration platform includes functionality to initiate SSH sessions to remote CPEs and the…
-
Medium 6.1
The Versa Director SD-WAN orchestration platform allows customization of the user interface, including the header, foot…
-
High 8.6
Versa Concerto Insecure Docker Mount Container Escape
The Versa Concerto SD-WAN orchestration platform is vulnerable to an privileges escalation and container escape vulnerability caused by unsafe default mounting of host binary paths that allow the container to modify host paths. The escape can be used to trigg…
-
Critical 9.2
Versa Concerto Actuator Authentication Bypass Information Leak
The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be leveraged for access to heap …
KEV Jan 22, 2026 -
Critical 10.0CVE-2025-34027 EPSS 46%
Versa Concerto Authentication Bypass File Write Remote Code Execution
The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The Spack upload endpoint can be leveraged for a Time-of-Check to T…
-
Critical 10.0
The Versa Director uses PostgreSQL (Postgres) to store operational and configuration data. It is also needed for High A…
-
Medium 6.6
The Versa Director offers REST APIs for orchestration and management. By design, certain APIs, such as the login screen…
-
Medium 6.6CVE-2024-39717 Exploited
The Versa Director GUI provides an option to customize the look and feel of the user interface. This option is only ava…
KEV Aug 23, 2024