SoftIron vulnerabilities
7 published CVEs name SoftIron among the affected products.
- 7Published CVEs7 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-116755
SoftIron HyperCloud: OS Command Injection in Orchestrator via Virtual Machine Template Fields
SoftIron · HyperCloud
High7.4 - CVE-2026-1842
HyperCloud Improper Refresh Token Validation and Access Token Invalidation Allows Long-Term Unauthorized Access
SoftIron · HyperCloud
Medium6.2 - CVE-2025-10650
Improper SSH Key Handling in Internal Debug Builds May Grant Cluster-Level Access to Non-Administrative Users
SoftIron · HyperCloud
Low1.8 - CVE-2024-13058
Authenticated, non-admin users can create storage pools via the sifi API
SoftIron · HyperCloud
Medium4.8 - CVE-2023-45085
When compute hosts are disabled and reenabled, they immediately transition to "ON", not "INIT"
SoftIron · HyperCloud
Low3.2 - CVE-2023-45084
Media caddy removal and reinsertion without reboot may cause data loss
SoftIron · HyperCloud
High7.0 - CVE-2023-45083
HyperCloud: "admin" and "serveradmin" users can be deleted
SoftIron · HyperCloud
Medium4.2