Read the docs

retspen

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

retspen records in CISA KEV

No retspen vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-62506 CVE-2026-92761 · GHSA-xx6h-4cr4-fw2m

WebVirtCloud Missing Authorization on Instance Control Actions

Priority HIGH 73

WebVirtCloud fails to properly validate permission flags in UserInstance grants, allowing view-only users to perform privileged actions.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00614 Published 2026-09-16 No fix listed CWE-862
TI-2026-85182 CVE-2026-122224 · GHSA-3cpq-r4vf-hxwg

Missing authorization in WebVirtCloud migrate and create API endpoints

Priority LOW 32

WebVirtCloud through commit bb920b0 contains a missing authorization vulnerability that allows low-privileged authenticated users to reach MigrateViewSet and CreateInstanceViewSet because no permission_classes are declar…

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00334 Published 2026-11-04 No fix listed CWE-862
Open these records in search →