8.8
/ 10
HIGH
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Description
SoftIron HyperCloud 2.5.0 through 2.6.3 may incorrectly add user SSH keys to the administrator-level authorized keys under certain conditions, allowing unauthorized privilege escalation to admin via SSH.
Basic Information
ID
CVE-2025-10650
Source
SoftIron
Published
Sep 18, 2025 at 19:11
Affected Product
Vendor
SoftIron
Product
HyperCloud
Version
2.5.0
Affected Versions
SoftIron HyperCloud 2.5.0