PatchTheCVEversa-networks vulnerabilities
Recent CVEs affecting versa-networks products. 7 tracked.
versa-networks has 7 tracked vulnerabilities, 2 critical and 2 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 4. Most recent: 2025-12-20. Highest priority: CVE-2025-34026 (score 86/100).
- CVE-2025-34290 HIGH 7.8 UPGRADE Versa SASE Client for Windows versions released between 7.8.7 and 7.9.4 contain a local privilege escalation v
- CVE-2024-42450 CRITICAL 10.0 DOWNGRADE The Versa Director uses PostgreSQL (Postgres) to store operational and configuration data
- CVE-2025-34027 CRITICAL 9.0 UPGRADE The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reve
- CVE-2025-34025 HIGH 8.8 DOWNGRADE The Versa Concerto SD-WAN orchestration platform is vulnerable to an privileges escalation and container escap
- CVE-2024-45229 MEDIUM 6.6 DOWNGRADE The Versa Director offers REST APIs for orchestration and management
- CVE-2025-34026 HIGH 7.5 EXPLOITED UPGRADE Versa Concerto Improper Authentication Vulnerability
- CVE-2024-39717 HIGH 7.2 EXPLOITED DOWNGRADE Versa Director Dangerous File Type Upload Vulnerability
FAQ
How do I fix versa-networks vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is versa-networks being exploited right now?
Yes: 2 versa-networks CVEs are on the CISA Known Exploited Vulnerabilities list, so patch those first.
Which versa-networks CVE should I patch first?
CVE-2025-34026 currently ranks highest (86/100): Versa Concerto Improper Authentication Vulnerability.