Skip to content
OpenAdvisories

Product · retspen

webvirtcloud

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-122224

    WebVirtCloud through commit bb920b0 Missing Authorization in REST API Migrate and Create Endpoints

    WebVirtCloud through commit bb920b0 contains a missing authorization vulnerability that allows low-privileged authenticated users to reach MigrateViewSet and CreateInstanceViewSet because no permission_classes are declared, so Django REST Framework defaults t…

    retspen webvirtcloud
  • High 8.8
    CVE-2026-92761

    WebVirtCloud Missing Authorization on Instance Control Actions

    WebVirtCloud fails to properly validate permission flags in UserInstance grants, allowing view-only users to perform privileged actions. Attackers with read-only grants can power off virtual machines, reset root passwords, install SSH keys, and manage ISO ima…

    retspen webvirtcloud