CVE-2026-92761

WebVirtCloud fails to properly validate permission flags in UserInstance grants, allowing view-only users to perform privileged actions. Attackers with read-only grants can power off virtual machines, reset root passwords, install SSH keys, and manage ISO images by exploiting the getinstance gate...

CVE-2026-92761

WebVirtCloud fails to properly validate permission flags in UserInstance grants. The vulnerable component is the get_instance gate in instances/views.py, which only checks for the existence of a grant rather than verifying its permission level. As a result, users holding view-only (read-only) gra...

EUVD-2026-81029

WebVirtCloud fails to properly validate permission flags in UserInstance grants, allowing view-only users to perform privileged actions. Attackers with read-only grants can power off virtual machines, reset root passwords, install SSH keys, and manage ISO images by exploiting the getinstance gate...

PT-2026-94043

Name of the Vulnerable Software and Affected Versions WebVirtCloud affected versions not specified Description WebVirtCloud fails to properly validate permission flags in UserInstance grants. This allows users with read-only access to perform privileged actions by exploiting the get instance gate...

CVE-2026-92761: Missing Authorization

WebVirtCloud fails to properly validate permission flags in UserInstance grants, allowing view-only users to perform privileged actions. Attackers with read-only grants can power off virtual machines, reset root passwords, install SSH keys, and manage ISO images by exploiting the getinstance gate...