# CVE-2025-34026

The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be leveraged for access to heap dumps and trace logs.This issue is known to affect Concerto from 12.1.2 through 12.2.0. Additional versions may be vulnerable.

- Page: https://www.vulneraibility.com/cve/CVE-2025-34026
- CVSS: 7.5
- Known exploited: yes, in CISA KEV since 2026-01-22; CISA due date 2026-02-12
- EPSS: 81.78%
- Detection templates only, no public exploit found: 1 Nuclei template
- CISA SSVC: exploitation active, automatable yes, technical impact partial (assessed 2026-01-23)
- Weakness: CWE-288
- Published: 2025-05-21

## Affected versions

- Versa Concerto: affected >= 12.1.2 and <= 12.2.0

A version outside these ranges is not a statement that it is unaffected.

## References

- [exploit] https://projectdiscovery.io/blog/versa-concerto-authentication-bypass-rce
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-34026
- [advisory] https://security-portal.versa-networks.com/emailbulletins/6830f94328defa375486ff2e

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.