SoftIron, a CNA, provides HyperCloud infrastructure and storage software; its modest disclosure footprint reflects a narrowly scoped product portfolio centered on cloud and storage platforms. The recurring weakness classes—improper initialization, improper privilege management, improper synchronization, and missing synchronization—point to concurrency and access-control challenges in infrastructure software. Current CVE counts, severity, and exploitation activity are shown alongside this summary.
The number and severity of CVEs published that impact products developed by SoftIron over time
Of all the CVEs published by SoftIron as a CNA, 100.0% affect products that SoftIron develops as a vendor.
Of all the CVEs published that affect products developed by SoftIron, 100.0% are self-published by SoftIron as a CNA.
Signals from CVEs in this vendor scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-1842MEDIUM HyperCloud versions 2.3.5 through 2.6.8 improperly allowed refresh tokens to be used directly for resource access and failed to invalidate previously issued access tokens when a re | Feb 20, 2026 | 6.2 | 21 | NO | NO |
CVE-2023-45084MEDIUM An issue exists in SoftIron HyperCloud where drive caddy removal and reinsertion without a reboot may erroneously cause the system to recognize the caddy as new media and wipe all | Dec 5, 2023 | 6.1 | 20 | NO | NO |
CVE-2024-13058MEDIUM An issue exists in SoftIron HyperCloud
where authenticated, but non-admin users can create data pools, which could potentially impact the performance and availability of the backe | Dec 30, 2024 | 4.8 | 16 | NO | NO |
SoftIron HyperCloud 2.5.0 through 2.6.3 may incorrectly add user SSH keys to the administrator-level authorized keys under certain conditions, allowing unauthorized privilege escal | Sep 18, 2025 | 1.8 | 15 | NO | NO |
An issue exists in SoftIron HyperCloud where compute nodes may come online immediately without following the correct initialization process. In this instance, workloads may be sch | Dec 5, 2023 | 3.3 | 14 | NO | NO |
CVE-2023-45083MEDIUM An Improper Privilege Management vulnerability exists in HyperCloud that will impact the ability for a user to authenticate against the management plane.
An authenticated admin-le | Dec 5, 2023 | 4.4 | 14 | NO | NO |
Signals from CVEs in this vendor scope (6 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by SoftIron.
Media articles that mention a CVE ID that affects a product developed by SoftIron — matched by CVE ID, not by vendor name.