Skip to content
OpenAdvisories

Vendor

Versa

21 known vulnerabilities.

Products

Director 12 VOS 6 Concerto 3
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.6
    CVE-2026-107240

    The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the VO…

    Versa VOS
  • High 7.6
    CVE-2026-107244

    The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the VO…

    Versa VOS
  • High 7.6
    CVE-2026-107241

    The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the VO…

    Versa VOS
  • High 7.6
    CVE-2026-107243

    The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the VO…

    Versa VOS
  • High 7.2
    CVE-2025-23171

    The Versa Director SD-WAN orchestration platform provides an option to upload various types of files. The Versa Directo…

    Versa Director
  • High 7.2
    CVE-2025-23172

    The Versa Director SD-WAN orchestration platform includes a Webhook feature for sending notifications to external HTTP …

    Versa Director
  • High 7.5
    CVE-2025-23173

    The Versa Director SD-WAN orchestration platform provides direct web-based access to uCPE virtual machines through the …

    Versa Director
  • High 8.6
    CVE-2025-34025

    Versa Concerto Insecure Docker Mount Container Escape

    The Versa Concerto SD-WAN orchestration platform is vulnerable to an privileges escalation and container escape vulnerability caused by unsafe default mounting of host binary paths that allow the container to modify host paths. The escape can be used to trigg…

    Versa Concerto