Coverage › CVE-2025-34026
CVE-2025-34026 Unmapped
Versa Concerto Improper Authentication Vulnerability
- Vendor / product
- Versa — Concerto
- Description (CISA)
- Versa Concerto SD-WAN orchestration platform contains an improper authentication vulnerability in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be leveraged for access to heap dumps and trace logs.
- Added to KEV
- 2026-01-22 — after the latest CTID mapping snapshot (2025-07-28)
- Due date
- 2026-02-12
- Required action
- Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known ransomware use
- Unknown
- CWE
- CWE-288
- CISA notes
- https://security-portal.versa-networks.com/emailbulletins/6830f94328defa375486ff2e
https://nvd.nist.gov/vuln/detail/CVE-2025-34026 - Elsewhere
- cve.org · NVD · CISA KEV · JSON
ATT&CK techniques
No public source states how this vulnerability is exploited in ATT&CK terms.
The only authoritative CVE → ATT&CK mapping in the open — CTID's Mappings Explorer, pinned to a KEV snapshot of 2025-07-28 and ATT&CK 16.1 — does not include CVE-2025-34026. This entry was added to KEV on 2026-01-22, after that snapshot; of the 283 entries added since, 0 have a mapping. CISA's catalogue carries no technique field. kevmap does not infer techniques from the CWE (CWE-288) — here is why — and does not guess.
This page will change state automatically if a mapping is published. What is shown above is everything CISA publishes about the entry.