SoftIron: CVE Program partner

CVEs, 365 days16 all time, 0 rejected

Quality100%median 99%

CVSS by the CNA100%share of records

CWE100%share of records

Affected versions100%not n/a or unspecified

CVSS added by CISA0%lower is better

Organisation	SoftIron
Role	CNA
Type	Vendor
Reports to	mitre
Scope	SoftIron HyperCloud branded products and technologies only.
Advisories	https://advisories.softiron.cloud/

CVE-2026-1842 2026-02-20 · CVSS 6.2
HyperCloud versions 2.3.5 through 2.6.8 improperly allowed refresh tokens to be used directly for resource access and failed to invalidate previously issued acc
CVE-2025-10650 2025-09-18 · CVSS 1.8
SoftIron HyperCloud 2.5.0 through 2.6.3 may incorrectly add user SSH keys to the administrator-level authorized keys under certain conditions, allowing unauthor
CVE-2024-13058 2024-12-30 · CVSS 4.8
An issue exists in SoftIron HyperCloud where authenticated, but non-admin users can create data pools, which could potentially impact the performance and avail
CVE-2023-45085 2023-12-05 · CVSS 3.2
An issue exists in SoftIron HyperCloud where compute nodes may come online immediately without following the correct initialization process. In this instance,
CVE-2023-45084 2023-12-05 · CVSS 7.0
An issue exists in SoftIron HyperCloud where drive caddy removal and reinsertion without a reboot may erroneously cause the system to recognize the caddy as new
CVE-2023-45083 2023-12-05 · CVSS 4.2
An Improper Privilege Management vulnerability exists in HyperCloud that will impact the ability for a user to authenticate against the management plane. An au

SoftIron