CVE-2026-92761

Name of the Vulnerable Software and Affected Versions WebVirtCloud (affected versions not specified)

Description WebVirtCloud fails to properly validate permission flags in UserInstance grants. This allows users with read-only access to perform privileged actions by exploiting the get instance gate, which only verifies the existence of a grant rather than the specific permissions associated with it. An attacker can use this flaw to power off virtual machines, reset root passwords, install SSH keys, and manage ISO images.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.