Exploit for Authentication Bypass Using an Alternate Path or Channel in Traefik

CVE-2026-48020 — Traefik StripPrefix Route-Level Auth Bypass...

VulnCheck KEV: CVE-2025-34027

The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The Spack upload endpoint can be leveraged for a Time-of-Check to Time-of-Use TOCTOU write in combination...