/

CVE-2026-122224

Severity:

HIGH RISK

(8.1)

CVE-2026-122224

Deferred

Vulnerability type

Category:

CWE:

CWE-862

Impact:

Severity:

HIGH RISK

(8.1)

CVSS version:

3.1

Catch this CVE while code is being written

Detect vulnerable code directly in pull requests, so CVEs are fixed before merge.

Sources

SourceLink
github.comgithub.com/catborise/webvirtcloud/commit/1227674d8f5a5230e5c654267773aca4ebc5c717
github.comgithub.com/retspen/webvirtcloud
github.comgithub.com/retspen/webvirtcloud/blob/bb920b0a7ffdf00c09e994dc2e45f05bc9ec1bb3/instances/api/viewsets.py#L125-L162
github.comgithub.com/retspen/webvirtcloud/blob/bb920b0a7ffdf00c09e994dc2e45f05bc9ec1bb3/instances/api/viewsets.py#L174-L183
github.comgithub.com/retspen/webvirtcloud/issues/689
hackmd.iohackmd.io/@hieuPenguinnn/webvirtcloud-api-missing-authz-migrate-create
vulncheck.comvulncheck.com/advisories/webvirtcloud-through-commit-bb920b0-missing-authorization-in-rest-api-migrate-and-create-endpoints
Find out what's already
exploitable in your codebase.