MSRXMSRXSecurity
Vendors / Versa

Versa vulnerabilities being exploited

1 Versa flaw was confirmed exploited in the wild in the past 365 days, across 1 product: Concerto. If you run any of them, patch these first.

AddedExploited vulnerabilityFix by
2026-01-22CVE-2025-34026 Concerto
Versa Concerto Improper Authentication Vulnerability

Versa Concerto SD-WAN orchestration platform contains an improper authentication vulnerability in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be leveraged for access to heap dumps and trace logs.

2026-02-12

Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.