CVE-2025-34026criticalunder attackCWE-288

CVE-2025-34026: critical vulnerability in Versa Concerto

Versa Concerto Actuator Authentication Bypass Information Leak

Published · Updated

Follow this CVE+ Monitor Concerto

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.2epss 82%
from disclosure to weapon
Published on NVDMay 21
CISA KEV+246d
Action required by CISAfederal deadline: 2026-02-12

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

Versa Concerto SD-WAN has a security flaw that allows attackers to bypass login protections and access sensitive administrative areas without proper credentials. Attackers can then view detailed system information like memory dumps and trace logs that could reveal confidential data.

Technical detail

An authentication bypass vulnerability in the Traefik reverse proxy configuration of Versa Concerto allows unauthenticated attackers to access internal Actuator endpoints. By exploiting this flaw, an attacker can retrieve heap dumps and trace logs, potentially exposing sensitive operational and credential information. Affected versions range from 12.1.2 through 12.2.0.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be leveraged for access to heap dumps and trace logs.This issue is known to affect Concerto from 12.1.2 through 12.2.0. Additional versions may be vulnerable.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:L/SA:N
Affected products
Versa · Concerto
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Versa Concerto

In the same product, most dangerous first.

CVE-2025-34027CRITICALVersa Concerto Authentication Bypass File Write Remote Code ExecutionEPSS 46.4%CVE-2025-34025HIGHVersa Concerto Insecure Docker Mount Container EscapeEPSS 0.6%