SoftIron vulnerabilities

7 published CVEs name SoftIron among the affected products.

Critical 0High 2Medium 3Low 2Not scored 0

CVEs per yearBy the year they were published

CVE-2026-116755
SoftIron HyperCloud: OS Command Injection in Orchestrator via Virtual Machine Template Fields
SoftIron · HyperCloud
High7.4
CVE-2026-1842
HyperCloud Improper Refresh Token Validation and Access Token Invalidation Allows Long-Term Unauthorized Access
SoftIron · HyperCloud
Medium6.2
CVE-2025-10650
Improper SSH Key Handling in Internal Debug Builds May Grant Cluster-Level Access to Non-Administrative Users
SoftIron · HyperCloud
Low1.8
CVE-2024-13058
Authenticated, non-admin users can create storage pools via the sifi API
SoftIron · HyperCloud
Medium4.8
CVE-2023-45085
When compute hosts are disabled and reenabled, they immediately transition to "ON", not "INIT"
SoftIron · HyperCloud
Low3.2
CVE-2023-45084
Media caddy removal and reinsertion without reboot may cause data loss
SoftIron · HyperCloud
High7.0
CVE-2023-45083
HyperCloud: "admin" and "serveradmin" users can be deleted
SoftIron · HyperCloud
Medium4.2