CVE-2025-23169Medium· 6.1▾ Sunlit

The Versa Director SD-WAN orchestration platform allows customization of the user interface, including the header, footer, and logo

The Versa Director SD-WAN orchestration platform allows customization of the user interface, including the header, footer, and logo. However, the input provided for these customizations is not properly validated or sanitized, allowing a …

▾ Sunlit zone — Low / medium · no exploitation signal

Depth score34/ 100 · Low

impact 33.6 · likelihood 0.1 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

Jun 19, 2025

Updated

Sep 3, 2026

CVSS

6.1

Vendor

—

Product

—

CWE

CWE-79

Depth score

34 · Low

EPSS

0.38% · p32

Platforms

—

Source

NVD

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N

EPSS history

Exploit-prediction probability, daily snapshots since Sep 3.

0.3% → 0.4%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

4 events · 457 days

Jun 19, 2025Published
Disclosed via NVD
Sep 3, 2026Record revised
Last analysed / modified upstream
Sep 3, 2026EPSS first tracked
0.3%
Sep 19, 2026EPSS peak
0.3% → 0.4%

CWE-79 #nvd

Full technical detail▾

Overview

Exploitation Status:

Versa Networks is not aware of any reported instance where this vulnerability was exploited. Proof of concept for this vulnerability has been disclosed by third party security researchers.

Workarounds or Mitigation:

There are no workarounds to disable the GUI option. Versa recommends that Director be upgraded to one of the remediated software versions.

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#nvd

← Back to feed