CVE-2025-24291

The Versa Director SD-WAN orchestration platform provides functionality to upload various types of files. However, the Java code handling file uploads contains an argument injection vulnerability. By appending additional arguments to the file name, an attacker can bypass MIME type validation, allowing the upload of arbitrary file types. This flaw can be exploited to place a malicious file on disk. Versa Networks is not aware of any reported instance where this vulnerability was exploited. Proof of concept for this vulnerability has been disclosed by third party security researchers. There are no workarounds to disable the GUI option. Versa recommends that Director be upgraded to one of the remediated software versions.

• CWE-74

• https://security-portal.versa-networks.com/emailbulletins/68526fc6dc94d6b9f2faf71d
• https://support.versa-networks.com/support/solutions/articles/23000024323-release-21-2-3
• https://support.versa-networks.com/support/solutions/articles/23000025680-release-22-1-2
• https://support.versa-networks.com/support/solutions/articles/23000026033-release-22-1-3
• https://support.versa-networks.com/support/solutions/articles/23000026708-release-22-1-4

Published

Jun 19, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-24285Multiple Improper Input Validation vulnerabilities in UniFi …9.8
• CVE-2025-24286A vulnerability allowing an authenticated user with the Back…4.9
• CVE-2025-24287A vulnerability allowing local system users to modify direct…6.1
• CVE-2025-24288The Versa Director software exposes a number of services by …9.8
• CVE-2025-24289A Cross-Site Request Forgery (CSRF) leading to Cross-Site Sc…7.5
• CVE-2025-24290Multiple Authenticated SQL Injection vulnerabilities found i…9.9
• CVE-2025-24292A misconfigured query in UniFi Network (v9.1.120 and earlier…6.8
• CVE-2025-24293# Active Storage allowed transformation methods potentially …9.2
• CVE-2025-24294The attack vector is a potential Denial of Service (DoS). Th…7.5
• CVE-2025-24296Improper input validation in some firmware for the Intel(R) …6
• CVE-2025-24297Due to lack of server-side input validation, attackers can i…9.8
• CVE-2025-24298in OpenHarmony v5.0.3 and prior versions allow a local attac…7.8