Softiron Hypercloud vulnerabilities

• softiron hypercloud SoftIron HyperCloud: OS Command Injection in Orchestrator via Virtual Machine Template Fields CVE-2026-116755 7.4 HighOctober 31, 2026
• softiron hypercloud HyperCloud Improper Refresh Token Validation and Access Token Invalidation Allows Long-Term Unauthorized Access CVE-2026-1842 6.2 MediumFebruary 20, 2026
• softiron hypercloud Improper SSH Key Handling in Internal Debug Builds May Grant Cluster-Level Access to Non-Administrative Users CVE-2025-10650 1.8 LowSeptember 18, 2025
• softiron hypercloud Authenticated, non-admin users can create storage pools via the sifi API CVE-2024-13058 4.8 MediumDecember 30, 2024
• softiron hypercloud When compute hosts are disabled and reenabled, they immediately transition to "ON", not "INIT" CVE-2023-45085 3.2 LowDecember 5, 2023
• softiron hypercloud Media caddy removal and reinsertion without reboot may cause data loss CVE-2023-45084 7.0 HighDecember 5, 2023
• softiron hypercloud HyperCloud: "admin" and "serveradmin" users can be deleted CVE-2023-45083 4.2 MediumDecember 5, 2023