CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-05-21
Versa Concerto SD-WAN Orchestration Platform Authentication Bypass and Information Disclosure Vulnerability (CVE-2025-34026) Security Advisory
[Affected Scope] Versa Concerto SD-WAN orchestration platform versions 12.1.2 through 12.2.0
[Impact] Unauthenticated attackers can bypass authentication via Traefik misconfiguration to access administrative and internal Actuator endpoints, potentially exposing heap dumps and trace logs containing sensitive credentials
[Mitigation] Immediately apply the official security patches provided by the vendor and restrict external access to administrative and Actuator endpoints