Skip to content
OpenAdvisories

Vendor

Hyland

15 known vulnerabilities.

Hyland at a glance

Last 12 months
8
Critical · all time
6
Exploited · all time
0
Public exploit · all time
2
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 5 vulnerabilities, 3 critical March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 2 vulnerabilities, 2 critical August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 1 vulnerability November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202610
Sep 202600
Aug 202600
Jul 202622
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202653
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202511
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202510
Dec 202400

Products

Perceptive Document Filters 4 Alfresco Transformation Service (Enterprise) 3 Alfresco Community (Transform Core) 3 Alfresco Enterprise 1 Alfresco Community 1 Nuxeo 1 OnBase Workflow Timer Service 1 PACSgear MediaWriter 1 Desktop Host 1 PACSgear PACS Scan 1 Alfresco Community Edition 1 Alfresco Enterprise Edition 1 OnBase 1
All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • High 7.8
    CVE-2026-110359

    Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privileg…

    Hyland Desktop Host
  • Critical 9.8
    CVE-2026-58127

    PACSgear MediaWriter 5.2.1 Unauthenticated RCE via .NET Remoting TCP Service

    PACSgear MediaWriter 5.2.1 exposes a .NET Remoting TCP service on port 9000 via PacsgearMediaServerEngine.dll, registered with ObjectURIs RemoteObj and UIRemoteObj, without any authentication requirement. By exploiting the MarshalByRefObject object unmarshall…

    Hyland PACSgear MediaWriter
  • Critical 9.8
    CVE-2026-58126

    PACSgear PACS Scan 5.2.1 Unauthenticated RCE via .NET Remoting TCP Service

    PACSgear PACS Scan 5.2.1 contains an unauthenticated remote code execution vulnerability that allows remote attackers to read and write arbitrary files by exploiting an exposed .NET Remoting TCP service on port 22222 via PGImageExchQueue.exe without any authe…

    Hyland PACSgear PACS Scan
  • Critical 9.8
    CVE-2026-26339

    Hyland Alfresco Transformation Service Argument Injection RCE

    Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve remote code execution through the argument injection vulnerability, which exists in the document processing functionality.

    Hyland Alfresco Transformation Service (Enterprise) Alfresco Community (Transform Core)
  • Critical 9.8
    CVE-2026-26338

    Hyland Alfresco Transformation Service SSRF

    Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve server-side request forgery (SSRF) through the document processing functionality.

    Hyland Alfresco Community (Transform Core) Alfresco Transformation Service (Enterprise)
  • High 8.2
    CVE-2026-26337

    Hyland Alfresco Transformation Service Absolute Path Traversal Arbitrary File Read and SSRF

    Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve both arbitrary file read and server-side request forgery through the absolute path traversal.

    Hyland Alfresco Transformation Service (Enterprise) Alfresco Community (Transform Core)
  • High 7.5
    CVE-2026-26336 Public exploit

    Hyland Alfresco Improper Authorization Arbitrary File Read

    Hyland Alfresco allows unauthenticated attackers to read arbitrary files from protected directories (like WEB-INF) via the "/share/page/resource/" endpoint, thus leading to the disclosure of sensitive configuration files.

    Hyland Alfresco Community Alfresco Enterprise
  • Critical 9.8
    CVE-2026-26221 Public exploit

    Hyland OnBase Timer Service Unauthenticated .NET Remoting RCE

    Hyland OnBase contains an unauthenticated .NET Remoting exposure in the OnBase Workflow Timer Service (Hyland.Core.Workflow.NTService.exe). An attacker who can reach the service can send crafted .NET Remoting requests to default HTTP channel endpoints on TCP/…

    Hyland OnBase Workflow Timer Service
  • Critical 10.0
    CVE-2025-34153

    Hyland OnBase < 17.0.2.87 .NET Remoting TCP Channel Unauthenticated RCE

    Hyland OnBase versions prior to 17.0.2.87 (other versions may be affected) are vulnerable to unauthenticated remote code execution via insecure deserialization on the .NET Remoting TCP channel. The service registers a listener on port 6031 with the URI endpoi…

    Hyland OnBase
  • Medium 4.3
    CVE-2025-0557

    Hyland Alfresco Community Edition URL s cross site scripting

    A vulnerability classified as problematic has been found in Hyland Alfresco Community Edition and Alfresco Enterprise Edition up to 6.2.2. This affects an unknown part of the file /share/s/ of the component URL Handler. The manipulation leads to cross site sc…

    Hyland Alfresco Enterprise Edition Alfresco Community Edition
  • Medium 5.4
    CVE-2021-32828

    Regular expression Denial of Service in MooTools

    The Nuxeo Platform is an open source content management platform for building business applications. In version 11.5.109, the `oauth2` REST API is vulnerable to Reflected Cross-Site Scripting (XSS). This XSS can be escalated to Remote Code Execution (RCE) by …

    Hyland Nuxeo org.nuxeo.ecm.platform:nuxeo-platform-oauth Maven
  • High 8.8
    CVE-2018-3844

    In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted DOCX document can lead to a use-af…

    Hyland Perceptive Document Filters
  • High 8.8
    CVE-2018-3851

    In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, an exploitable stack-based buffer overflow e…

    Hyland Perceptive Document Filters
  • High 8.8
    CVE-2018-3855

    In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to …

    Hyland Perceptive Document Filters
  • High 8.8
    CVE-2018-3845

    In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to …

    Hyland Perceptive Document Filters