---
id: "CVE-2025-34026"
kind: "vulnerability"
aliases: ["CVE-2025-34026"]
title: "versa-networks concerto: The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse\u2026"
severity: "critical"
cvss: 9.2
epss: null
exploited: true
status: "open"
category: "vendor"
products: [{"name": "Versa Concerto", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "versa-networks concerto", "fixed": ["12.1.2"], "affected": ">= 11.4.0, < 12.1.2", "ecosystem": "vendor"}, {"name": "versa-networks concerto", "fixed": [], "affected": "= 12.1.2", "ecosystem": "vendor"}, {"name": "versa-networks concerto", "fixed": [], "affected": "= 12.2.0", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "sd-wan", "self-hosted", "vendor", "versa-concerto"]
not_affected_if: ["unknown"]
published_at: "2025-05-21T22:15:50+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-23T23:44:51+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-34026", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-34026", "first_seen_at": "2026-10-23T23:44:51+00:00"}]
---

# versa-networks concerto: The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse…

Versa Concerto, an SD-WAN orchestration platform, has an authentication bypass in its Traefik reverse proxy configuration that exposes an internal Actuator endpoint. An attacker who reaches that endpoint can read heap dumps and trace logs, which can contain credentials and session data.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Versa Concerto affected ? fixed ?
- vendor:versa-networks concerto affected >= 11.4.0, < 12.1.2 fixed 12.1.2
- vendor:versa-networks concerto affected = 12.1.2 fixed ?
- vendor:versa-networks concerto affected = 12.2.0 fixed ?

## Fix

Apply the mitigations per vendor instructions (CISA KEV); if mitigations are unavailable, discontinue use of the product.

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-34026
- 2026-10-23T23:44:51+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2025-34026

## From the sources

Versa Concerto SD-WAN orchestration platform contains an improper authentication vulnerability in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be leveraged for access to heap dumps and trace logs.

CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_