CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Versa Concerto SD-WAN Orchestration Platform Authentication Bypass and Information Disclosure Vulnerability (CVE-2025-34026) Security Advisory
[Affected Scope] Versa Concerto SD-WAN orchestration platform versions 12.1.2 through 12.2.0
[Impact] Unauthenticated attackers can bypass authentication via Traefik misconfiguration to access administrative and internal Actuator endpoints, potentially exposing heap dumps and trace logs containing sensitive credentials
[Mitigation] Immediately apply the official security patches provided by the vendor and restrict external access to administrative and Actuator endpoints
Spring Cloud Gateway Remote Code Execution (RCE) Vulnerability Analysis and Mitigation Guide (CVE-2022-22947)
[Affected Scope] Spring Cloud Gateway versions prior to 3.1.1 and 3.0.7, where the Gateway Actuator endpoint is enabled, exposed, and unsecured
[Impact] Unauthenticated remote attackers can execute arbitrary system commands on the host by sending maliciously crafted HTTP requests
[Mitigation] Immediately upgrade Spring Cloud Gateway to version 3.1.1, 3.0.7, or higher, and disable or secure the Gateway Actuator endpoint