CVE-2026-107243 | Versa VOS up to 21.2.3 express-session server.js hard-coded credentials

November 10, 2026 Yanac

A vulnerability described as critical has been identified in Versa VOS up to 21.2.3. This impacts an unknown function of the file server.js of the component express-session. Such manipulation leads to hard-coded credentials.

This vulnerability is listed as CVE-2026-107243. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More