CVE-2026-116755

The Orchestrator component of SoftIron HyperCloud (versions 1.0 through 2.6.17) is vulnerable to OS Command Injection due to improper neutralization of special elements. Specifically, attacker-controlled content in virtual machine templates, such as the VM DESCRIPTION field, is processed via a sh...