Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Hyland — Vulnerabilities & Security Advisories 10

Browse all 10 CVE security advisories affecting Hyland. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Hyland develops enterprise content management and document processing solutions, serving organizations with workflow automation and data integration. Historically, vulnerabilities have included remote code execution, cross-site scripting, and privilege escalation, often stemming from input validation flaws in web interfaces. The company has addressed security gaps in its OnBase platform, with CVEs revealing issues in authentication mechanisms and API endpoints. While no major public security incidents have been widely reported, the consistent presence of multiple CVEs indicates ongoing security challenges requiring vigilant patch management. Organizations implementing Hyland solutions should prioritize regular updates and security assessments to mitigate potential exploitation risks.

CVE ID Title CVSS Severity Published
CVE-2026-110359 Hyland Desktop Host 本地提权漏洞 — Desktop Host CWE-276 7.8 High 2026-10-14
CVE-2026-58127 PACSgear MediaWriter 5.2.1 Unauthenticated RCE via .NET Remoting TCP Service — PACSgear MediaWriter CWE-306 9.8 Critical 2026-07-01
CVE-2026-58126 PACSgear PACS Scan 5.2.1 Unauthenticated RCE via .NET Remoting TCP Service — PACSgear PACS Scan CWE-306 9.8 Critical 2026-07-01
CVE-2026-26339 Hyland Alfresco Transformation Service Argument Injection RCE — Alfresco Transformation Service (Enterprise) CWE-918 9.8 Critical 2026-02-19
CVE-2026-26338 Hyland Alfresco Transformation Service SSRF — Alfresco Transformation Service (Enterprise) CWE-918 9.8 Critical 2026-02-19
CVE-2026-26337 Hyland Alfresco Transformation Service Absolute Path Traversal Arbitrary File Read and SSRF — Alfresco Transformation Service (Enterprise) CWE-36 8.2 High 2026-02-19
CVE-2026-26336 Hyland Alfresco Improper Authorization Arbitrary File Read — Alfresco Enterprise CWE-863 7.5 High 2026-02-19
CVE-2026-26221 Hyland OnBase Timer Service Unauthenticated .NET Remoting RCE — OnBase Workflow Timer Service CWE-502 9.8 Critical 2026-02-13
CVE-2025-0557 Hyland Alfresco Community Edition URL s cross site scripting — Alfresco Community Edition CWE-79 4.3 Medium 2025-01-18
CVE-2021-32828 Regular expression Denial of Service in MooTools — Nuxeo CWE-502 5.4 Medium 2023-01-05

This page lists every published CVE security advisory associated with Hyland. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.