NVD disclosure day

Published threat advisories for May 21, 2025

CVE-2025-34026

Versa Concerto: Authentication Bypass Risk

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

The Versa Concerto SD-WAN orchestration platform contains an authentication bypass vulnerability. This allows unauthorized access to administrative functions and sensitive system information. The risk to affected organizations includes unauthorized data access and potential system compromise.

NVD published: May 21, 2025 • CISA KEV

CVE advisoryKnown Exploit

CVE-2025-4008

Meteobridge Command Injection Vulnerability

Halo Surface Signal: 2 out of 5 — less likely to be public-facing.

A command injection vulnerability exists in the Meteobridge web interface, potentially allowing unauthenticated attackers to execute commands with elevated privileges on affected devices. This could lead to unauthorized system access and compromise of weather station data. The realistic business risk involves a loss of

NVD published: May 21, 2025 • CISA KEV