Retspen

2 CVEs in 1 Retspen product, including Webvirtcloud. Newest: CVE-2026-122224 (2026-11-04). Severity, EPSS and public exploits for each.

Retspen products with known CVEs

ProductCVEs
Webvirtcloud2
Retspen CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-122224High8.12026-11-04WebVirtCloud through commit bb920b0 contains a missing authorization vulnerability that allows low-privileged authenticated users to reach MigrateViewSet and C…
CVE-2026-92761High8.82026-09-16WebVirtCloud fails to properly validate permission flags in UserInstance grants, allowing view-only users to perform privileged actions. Attackers with read-on…