Versa Concerto Improper Authentication Vulnerability

Versa Concerto

Versa Concerto SD-WAN orchestration platform contains an improper authentication vulnerability in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be leveraged for access to heap dumps and trace logs. Added to CISA KEV on 2026-01-22 (federal deadline 2026-02-12).

First seen: 22 Jan 2026
Last update: 22 Jan 2026, 12:00 UTC
Identifiers: CVE-2025-34026
Source: CISA KEV

Check this repository for exposure to one security incident from pwned.coffee. Report first, change nothing until I say so.

## Versa Concerto Improper Authentication Vulnerability
Severity: high, exploited in the wild. Patch status: patched.
Affected: Versa Concerto
Ids: CVE-2025-34026

Versa Concerto SD-WAN orchestration platform contains an improper authentication vulnerability in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be leveraged for access to heap dumps and trace logs. Added to CISA KEV on 2026-01-22 (federal deadline 2026-02-12).

## Steps
1. Search the repo, its CI and infra config for Versa Concerto. If present, report the version in use and whether it's affected.

## Report
A table: file, product or package, version in use, affected yes/no, exact fix. Then anything a human has to check outside the repo.

If you have the pwned.coffee MCP server (https://pwned.coffee/mcp), call lookup_cve("CVE-2025-34026") for the latest, and check_repo with this repo's lockfiles, Dockerfiles and workflows for a full receipt.
Sources: https://nvd.nist.gov/vuln/detail/CVE-2025-34026 https://security-portal.versa-networks.com/emailbulletins/6830f94328defa375486ff2e
https://pwned.coffee/i/versa-concerto-improper-authentication-vulnerability-cve-2025-34026

Sources

Totalone hot coffee