High-Risk CVEs Discovered in Multi-Tenant Environments

• •CVE-2026-92761 allows low-privilege users to control virtual machines in WebVirtCloud.
• •CVE-2026-92782 enables cross-tenant data access in Chroma, risking sensitive information.
• •Both vulnerabilities are high-risk and require urgent remediation in multi-tenant environments.

Two critical vulnerabilities, CVE-2026-92761 and CVE-2026-92782, were published on September 16, 2026. CVE-2026-92761 affects WebVirtCloud, allowing low-privilege users to perform administrative actions on virtual machines, while CVE-2026-92782 impacts Chroma, enabling authenticated users to access and modify data across tenant boundaries. Both vulnerabilities pose a high risk, particularly in multi-tenant deployments, as they could lead to unauthorized access and data manipulation. The attack vectors require only valid credentials and involve exploiting insufficient authorization checks. Current exploitation status remains uncertain for both CVEs, as no proof-of-concept or active exploitation reports are available. Immediate remediation is advised to mitigate potential impacts on workloads and data integrity.