High severity · published May 21, 2025
CVE-2025-34026
Versa Concerto Actuator Authentication Bypass Information Leak
In wildKEV
7.5
CVSS
81.8%
EPSS
Yes
On KEV
Description
The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be leveraged for access to heap dumps and trace logs.This issue is known to affect Concerto from 12.1.2 through 12.2.0. Additional versions may be vulnerable.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)81.8% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Jan 22, 2026
Federal remediation dueFeb 12, 2026
Ransomware campaign useNot known
Affected products
Which versions
CO
Concerto · Versa
12.1.2 through 12.2.0 · source: vendor, NVD, KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-34026
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-34026
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
exploit
https://projectdiscovery.io/blog/versa-concerto-authentication-bypass-rce
More from Concerto
9.0
CVE-2025-34027
Versa Concerto Authentication Bypass File Write Remote Code Execution
8.8
CVE-2025-34025
Versa Concerto Insecure Docker Mount Container Escape