ZeusQA
Start free

Known exploited vulnerabilities

Versa vulnerabilities attackers have used

Every Versa vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 2 Versa vulnerabilities as exploited in the wild, 1 of them added in the last 12 months. The most recent is CVE-2025-34026, added Jan 22, 2026. Concerto has the most entries (1).

In KEV, all time
2
Added, last 12 months
1
Used in ransomware
0
New CVEs this week
0

By product

Concerto (1), Director (1).

Every Versa entry in CISA KEV

  1. CVE-2025-34026

    Added · due

    Versa Concerto Improper Authentication Vulnerability

    Versa Concerto SD-WAN orchestration platform contains an improper authentication vulnerability in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be…

  2. CVE-2024-39717

    Added · due

    Versa Director Dangerous File Type Upload Vulnerability

    The Versa Director GUI contains an unrestricted upload of file with dangerous type vulnerability that allows administrators with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin privileges to customize the user interface…

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works