CVE-2018-16496 Auth bypass in Versa Director

What is CVE-2018-16496?

CVE-2018-16496 is a medium-severity authentication bypass vulnerability in Versa Director, published on 26 May 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

In Versa Director, the un-authentication request found.

Weakness: CWE-287

Which versions are affected by CVE-2018-16496?

It affects 1 product.

Products include Versa-Networks Versa Director.

How do I fix CVE-2018-16496?

No fix has been published for CVE-2018-16496 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2018-16496 being exploited?

There is no known exploitation of CVE-2018-16496 in the wild and no public exploit code.

Other vulnerabilities in Versa Director

• CVE-2024-39717 Versa Director Dangerous File Type Upload Exploited Medium 6.6
• CVE-2024-42450 Hardcoded credentials in Director Critical 10.0
• CVE-2025-24288 Hardcoded credentials in Director Critical 9.8
• CVE-2019-25029 Command injection in Versa Director Critical 9.8
• CVE-2025-23173 Information disclosure in Director High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-7hjq-w7jv-vgv5.