CVE-2026-122224

The WebVirtCloud software (through commit bb920b0 ) is vulnerable to a missing authorization flaw (CWE-862) in its REST API. The vulnerability exists because permission_classes are not declared in the MigrateViewSet and CreateInstanceViewSet, causing the Django REST Framework to default to AllowA...