Skip to content
OpenAdvisories

Vendor

Versa

22 known vulnerabilities.

5 results · Clear filters · Feed

  • Critical 9.8

    The Versa Director software exposes a number of services by default and allow attackers an easy foothold due to default…

  • Critical 9.8

    The Versa Director SD-WAN orchestration platform which makes use of Cisco NCS application service. Active and Standby D…

  • Critical 9.2
    CVE-2025-34026 Exploited Scanner template EPSS 82%

    Versa Concerto Actuator Authentication Bypass Information Leak

    The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be leveraged for access to heap …

    KEV Jan 22, 2026
  • Critical 10.0
    CVE-2025-34027 Scanner template EPSS 46%

    Versa Concerto Authentication Bypass File Write Remote Code Execution

    The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The Spack upload endpoint can be leveraged for a Time-of-Check to T…

  • Critical 10.0

    The Versa Director uses PostgreSQL (Postgres) to store operational and configuration data. It is also needed for High A…