How many Versa Networks Concerto CVEs are in CISA KEV?

Yes — 1 of Versa Networks Concerto's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of Versa Networks Concerto are affected?

6 distinct Versa Networks Concerto versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Versa Networks Concerto CVEs?

Versa Networks Concerto's CVEs most often map to these CWE weakness types: CWE-288 (Authentication Bypass Using an Alternate Path or Channel), CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition), CWE-732 (Incorrect Permission Assignment for Critical Resource).

How many critical Versa Networks Concerto vulnerabilities are there?

Versa Networks Concerto has 2 critical and 1 high-severity CVEs.

What is the average severity of Versa Networks Concerto CVEs?

The average CVSS base score across Versa Networks Concerto's scored CVEs is 9.3.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Versa Networks

3 CVEs

1 in CISA KEV

Versa Networks Concerto Vulnerabilities

Name: Versa Networks Concerto vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Concerto by Versa Networks.

3

Total CVEs

Published

1

In CISA KEV

Exploited in the wild

3

Public exploits

PoC or exploit code

9.3

Avg CVSS

2025–2025

Last updated May 21, 2025

Overview

Versa Networks Concerto has 3 published CVE records since 2025, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 9.3.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Versa Networks Concerto, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Versa Networks Concerto's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High1

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

1

One of Versa Networks Concerto's CVEs is confirmed exploited in the wild.

Public exploits

3

3 of Versa Networks Concerto's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Versa Networks Concerto version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

12.1.2 <= v <= 12.2.03 CVEs
11.4.0 <= v < 12.1.21 CVE
12.1.2 <= v <= 12.1.21 CVE
12.2.0 <= v <= 12.2.01 CVE

Fixed in

> 12.2.03 CVEs
12.1.21 CVE

Find a version

3 CVEs

Sort

Versa Concerto Insecure Docker Mount Container Escape
CVE-2025-34025
Public exploit
Patch
Workaround
CWE-732
High · CVSS 8.6
EPSS 0.4% (35th pct)2025-05-21
Versa Concerto Actuator Authentication Bypass Information Leak
CVE-2025-34026
CISA KEV
Public exploit
Patch
Workaround
CWE-288
Added to CISA KEV 2026-01-22
Critical · CVSS 9.2
EPSS 83.2% (100th pct)2025-05-21
Versa Concerto Authentication Bypass File Write Remote Code Execution
CVE-2025-34027
Public exploit
Patch
Workaround
CWE-367
Critical · CVSS 10.0
EPSS 36.6% (98th pct)2025-05-21

Common weakness types

The CWE weakness categories most often found in Versa Networks Concerto CVEs. Follow any weakness for its full explanation.

Other Versa Networks products

Browse vulnerabilities for other products by Versa Networks.

Director12 CVEs versa director7 CVEs versa operating system4 CVEs versa analytics2 CVEs Concerto SD-WAN orchestration platform1 CVEs SASE Client for Windows1 CVEs Traefik1 CVEs Traefik reverse proxy1 CVEs

All Versa Networks vulnerabilities

Frequently asked questions

Common questions about Versa Networks Concerto vulnerabilities.

How many CVEs does Versa Networks Concerto have?: Versa Networks Concerto has 3 published CVE records since 2025.
How many Versa Networks Concerto CVEs are in CISA KEV?: Yes — 1 of Versa Networks Concerto's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Versa Networks Concerto vulnerabilities?: Yes — 3 of Versa Networks Concerto's CVEs have a known public exploit.
Which versions of Versa Networks Concerto are affected?: 6 distinct Versa Networks Concerto versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Versa Networks Concerto CVEs?: Versa Networks Concerto's CVEs most often map to these CWE weakness types: CWE-288 (Authentication Bypass Using an Alternate Path or Channel), CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition), CWE-732 (Incorrect Permission Assignment for Critical Resource).
How many critical Versa Networks Concerto vulnerabilities are there?: Versa Networks Concerto has 2 critical and 1 high-severity CVEs.
What is the average severity of Versa Networks Concerto CVEs?: The average CVSS base score across Versa Networks Concerto's scored CVEs is 9.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Versa Networks Concerto vulnerabilities

Monitor new Versa Networks Concerto vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing