CVE-2025-34026 Versa Concerto
Versa Concerto SD-WAN orchestration platform contains an improper authentication vulnerability in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be leveraged for access to heap dumps and trace logs.
- CVSS
- not scored
On CISA’s exploited list
Versa Concerto Improper Authentication Vulnerability
- Added
- 2026-01-22
- Federal patch deadline
- 2026-02-12
- Ransomware use
- not known