Hyland vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20251
3. 20268

Newest CVEs

• CVE-2026-110359

  Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privileged service running from the…

  Hyland · Desktop Host

  High7.8
• CVE-2026-58127

  PACSgear MediaWriter 5.2.1 Unauthenticated RCE via .NET Remoting TCP Service

  Hyland · PACSgear MediaWriter

  Critical9.3
• CVE-2026-58126

  PACSgear PACS Scan 5.2.1 Unauthenticated RCE via .NET Remoting TCP Service

  Hyland · PACSgear PACS Scan

  Critical9.3
• CVE-2026-26339

  Hyland Alfresco Transformation Service Argument Injection RCE

  Hyland · Alfresco Transformation Service (Enterprise)

  Critical9.3
• CVE-2026-26338

  Hyland Alfresco Transformation Service SSRF

  Hyland · Alfresco Transformation Service (Enterprise)

  Medium6.9
• CVE-2026-26337

  Hyland Alfresco Transformation Service Absolute Path Traversal Arbitrary File Read and SSRF

  Hyland · Alfresco Transformation Service (Enterprise)

  High8.8
• CVE-2026-26336

  Hyland Alfresco Improper Authorization Arbitrary File Read

  Hyland · Alfresco Enterprise

  High8.7
• CVE-2026-26221

  Hyland OnBase Timer Service Unauthenticated .NET Remoting RCE

  Hyland · OnBase Workflow Timer Service

  Critical9.3
• CVE-2025-0557

  Hyland Alfresco Community Edition URL s cross site scripting

  Hyland · Alfresco Community Edition

  Medium6.9
• CVE-2021-32828

  Regular expression Denial of Service in MooTools

  Hyland · Nuxeo

  Medium5.4