SoftIron HyperCloud

• CVE-2026-116755 High 7.4 SoftIron HyperCloud: OS Command Injection in Orchestrator via Virtual Machine Template Fields 0.9%
• CVE-2026-1842 Medium 6.2 HyperCloud Improper Refresh Token Validation and Access Token Invalidation Allows Long-Term Unauthorized Access 0.2%
• CVE-2025-10650 Low 1.8 Improper SSH Key Handling in Internal Debug Builds May Grant Cluster-Level Access to Non-Administrative Users 0.1%
• CVE-2024-13058 Medium 4.8 Authenticated, non-admin users can create storage pools via the sifi API 0.4%
• CVE-2023-45085 Low 3.2 When compute hosts are disabled and reenabled, they immediately transition to "ON", not "INIT" 0.2%
• CVE-2023-45084 High 7.0 Media caddy removal and reinsertion without reboot may cause data loss 0.2%
• CVE-2023-45083 Medium 4.2 HyperCloud: "admin" and "serveradmin" users can be deleted 0.2%