Skip to content
OpenAdvisories

Vendor

Hyland

15 known vulnerabilities.

Products

Perceptive Document Filters 4 Alfresco Transformation Service (Enterprise) 3 Alfresco Community (Transform Core) 3 Alfresco Enterprise 1 Alfresco Community 1 Nuxeo 1 OnBase Workflow Timer Service 1 PACSgear MediaWriter 1 Desktop Host 1 PACSgear PACS Scan 1 Alfresco Community Edition 1 Alfresco Enterprise Edition 1 OnBase 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-26336 Public exploit

    Hyland Alfresco Improper Authorization Arbitrary File Read

    Hyland Alfresco allows unauthenticated attackers to read arbitrary files from protected directories (like WEB-INF) via the "/share/page/resource/" endpoint, thus leading to the disclosure of sensitive configuration files.

    Hyland Alfresco Community Alfresco Enterprise
  • Critical 9.8
    CVE-2026-26221 Public exploit

    Hyland OnBase Timer Service Unauthenticated .NET Remoting RCE

    Hyland OnBase contains an unauthenticated .NET Remoting exposure in the OnBase Workflow Timer Service (Hyland.Core.Workflow.NTService.exe). An attacker who can reach the service can send crafted .NET Remoting requests to default HTTP channel endpoints on TCP/…

    Hyland OnBase Workflow Timer Service