CVE-2025-10650

Publication date

2025-09-18 19:11:51

Family

SoftIron

State

PUBLISHED

Description

SoftIron HyperCloud 2.5.0 through 2.6.3 may incorrectly add user SSH keys to the administrator-level authorized keys under certain conditions, allowing unauthorized privilege escalation to admin via SSH.