CVE-2026-116755

Improper Neutralization of Special Elements used in a Command 'Command Injection' in the Orchestrator component of SoftIron HyperCloud allows an authenticated user with access to the management plane to execute arbitrary operating system commands on hypervisor hosts as the privileged orchestratio...

CVE-2026-116755

The Orchestrator component of SoftIron HyperCloud (versions 1.0 through 2.6.17) is vulnerable to OS Command Injection due to improper neutralization of special elements. Specifically, attacker-controlled content in virtual machine templates, such as the VM DESCRIPTION field, is processed via a sh...

CVE-2026-116755 SoftIron HyperCloud: OS Command Injection in Orchestrator via Virtual Machine Template Fields

Improper Neutralization of Special Elements used in a Command 'Command Injection' in the Orchestrator component of SoftIron HyperCloud allows an authenticated user with access to the management plane to execute arbitrary operating system commands on hypervisor hosts as the privileged orchestratio...

EUVD-2026-114571

Improper Neutralization of Special Elements used in a Command 'Command Injection' in the Orchestrator component of SoftIron HyperCloud allows an authenticated user with access to the management plane to execute arbitrary operating system commands on hypervisor hosts as the privileged orchestratio...

CVE-2026-116755: SoftIron HyperCloud: Improper Neutralization of Special Elements used in a Command ('Command Injection') in the Orchestrator component of…

Improper Neutralization of Special Elements used in a Command 'Command Injection' in the Orchestrator component of SoftIron HyperCloud allows an authenticated user with access to the management plane to execute arbitrary operating system commands on hypervisor hosts as the privileged orchestratio...

PT-2026-134408

Name of the Vulnerable Software and Affected Versions SoftIron HyperCloud versions 1.0 through 2.6.17 Description Command Injection in the Orchestrator component allows an authenticated user with management plane access to execute arbitrary operating system commands on hypervisor hosts as the...

SoftIron HyperCloud security vulnerabilities

SoftIron HyperCloud is an intelligent cloud architecture developed by SoftIron Corporation. Versions of SoftIron HyperCloud 2.6.8 and earlier contain security vulnerabilities. These vulnerabilities stem from the ability to directly use refresh tokens for resource access, without ensuring that...

CVE-2023-45085

An issue exists in SoftIron HyperCloud where compute nodes may come online immediately without following the correct initialization process. In this instance, workloads may be scheduled on these nodes and deploy to a failed or erroneous state, which impacts the availability of these workloads tha...

CVE-2023-45084

An issue exists in SoftIron HyperCloud where drive caddy removal and reinsertion without a reboot may erroneously cause the system to recognize the caddy as new media and wipe all data on the drives due to a missing synchronization flaw, which impacts data availability and integrity. This issue...

EUVD-2023-49406

Malicious code in bioql PyPI...

EUVD-2024-51312

Malicious code in bioql PyPI...

EUVD-2023-49405

Malicious code in bioql PyPI...

CVE-2025-10650

SoftIron HyperCloud 2.5.0 through 2.6.3 may incorrectly add user SSH keys to the administrator-level authorized keys under certain conditions, allowing unauthorized privilege escalation to admin via SSH. Affects non-production debug and internal development builds created between versions 2.5.0 a...

CVE-2025-10650 Improper SSH Key Handling in Internal Debug Builds May Grant Cluster-Level Access to Non-Administrative Users

SoftIron HyperCloud 2.5.0 through 2.6.3 may incorrectly add user SSH keys to the administrator-level authorized keys under certain conditions, allowing unauthorized privilege escalation to admin via SSH. Affects non-production debug and internal development builds created between versions 2.5.0 a...

CVE-2025-10650 Improper SSH Key Handling in Internal Debug Builds May Grant Cluster-Level Access to Non-Administrative Users

SoftIron HyperCloud 2.5.0 through 2.6.3 may incorrectly add user SSH keys to the administrator-level authorized keys under certain conditions, allowing unauthorized privilege escalation to admin via SSH. Affects non-production debug and internal development builds created between versions 2.5.0 a...

PT-2025-38474

Name of the Vulnerable Software and Affected Versions SoftIron HyperCloud versions 2.5.0 through 2.6.3 Description SoftIron HyperCloud versions 2.5.0 through 2.6.3 may incorrectly add user SSH keys to the administrator-level authorized keys under certain conditions, potentially allowing...

SoftIron HyperCloud security vulnerabilities

SoftIron HyperCloud is an intelligent cloud architecture from SoftIron. A security vulnerability exists in SoftIron HyperCloud versions 2.5.0 through 2.6.3 that stems from incorrectly adding a user SSH key to an administrator-level authorization key, which could lead to unauthorized elevation of...

CVE-2025-10650: Improper Privilege Management

SoftIron HyperCloud 2.5.0 through 2.6.3 may incorrectly add user SSH keys to the administrator-level authorized keys under certain conditions, allowing unauthorized privilege escalation to admin via SSH. Affects non-production debug and internal development builds created between versions 2.5.0 a...

CVE-2024-13058

An issue exists in SoftIron HyperCloud where authenticated, but non-admin users can create data pools, which could potentially impact the performance and availability of the backend software-defined storage subsystem. This issue only impacts SoftIron HyperCloud and related software products such ...

CVE-2024-13058

An issue exists in SoftIron HyperCloud where authenticated, but non-admin users can create data pools, which could potentially impact the performance and availability of the backend software-defined storage subsystem. This issue only impacts SoftIron HyperCloud and related software products such ...