Versa vulnerabilities

CVEs per yearBy the year they were published

1. 20243
2. 202512

Known exploitedNewest addition to KEV first

• CVE-2025-34026

  Versa Concerto Actuator Authentication Bypass Information Leak

  Versa · Concerto

  ExploitedCritical9.2
• CVE-2024-39717

  The Versa Director GUI provides an option to customize the look and feel of the user interface. This option is only available for a user logged with…

  Versa · Director

  ExploitedMedium6.6

Newest CVEs

• CVE-2025-24288

  The Versa Director software exposes a number of services by default and allow attackers an easy foothold due to default credentials and multiple accounts (most…

  Versa · Director

  Critical9.8
• CVE-2025-24291

  The Versa Director SD-WAN orchestration platform provides functionality to upload various types of files. However, the Java code handling file uploads contains…

  Versa · Director

  Medium6.1
• CVE-2024-45208

  The Versa Director SD-WAN orchestration platform which makes use of Cisco NCS application service. Active and Standby Directors communicate over TCP ports 4566…

  Versa · Director

  Critical9.8
• CVE-2025-23171

  The Versa Director SD-WAN orchestration platform provides an option to upload various types of files. The Versa Director does not correctly limit file upload…

  Versa · Director

  High7.2
• CVE-2025-23168

  The Versa Director SD-WAN orchestration platform implements Two-Factor Authentication (2FA) using One-Time Passcodes (OTP) delivered via email or SMS. Versa…

  Versa · Director

  Medium6.3
• CVE-2025-23172

  The Versa Director SD-WAN orchestration platform includes a Webhook feature for sending notifications to external HTTP endpoints. However, the "Add Webhook"…

  Versa · Director

  High7.2
• CVE-2025-23173

  The Versa Director SD-WAN orchestration platform provides direct web-based access to uCPE virtual machines through the Director GUI. By default, the websockify…

  Versa · Director

  High7.5
• CVE-2025-23169

  The Versa Director SD-WAN orchestration platform allows customization of the user interface, including the header, footer, and logo. However, the input…

  Versa · Director

  Medium6.1
• CVE-2025-23170

  The Versa Director SD-WAN orchestration platform includes functionality to initiate SSH sessions to remote CPEs and the Director shell via Shell-In-A-Box. The…

  Versa · Director

  Medium6.7
• CVE-2025-34025

  Versa Concerto Insecure Docker Mount Container Escape

  Versa · Concerto

  High8.6