Concerto vulnerabilities

3 known vulnerabilities in Concerto from Versa. 3 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Concerto: Incorrect Permission Assignment for Critical Resource

  CVE-2025-34025May 21, 2025Versa

  The Versa Concerto SD-WAN orchestration platform is vulnerable to an privileges escalation and container escape vulnerability caused by unsafe default mounting of host binary paths that allow the container to modify host paths. The escape can be used to trigge

• 9.0 Critical severity

  Concerto: Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2025-34027May 21, 2025VersaEPSS 46.4%

  The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The Spack upload endpoint can be leveraged for a Time-of-Check to Ti

• 7.5 High severity

  Versa Concerto Improper Authentication Exploited

  CVE-2025-34026May 21, 2025VersaEPSS 81.8%

  The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be leveraged for access to heap d