Hyland vulnerabilities

Products

• Onbase 15
• Perceptive Document Filters 4
• Alfresco Community (transform Core) 3
• Alfresco Content Services 3
• Alfresco Transformation Service (enterprise) 3
• Alfresco Transform Core 3
• Alfresco Transform Service 3
• Pacsgear 2
• Saperion Web Client 2

Newest

• hyland desktop host Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This... CVE-2026-110359 7.8 HighOctober 14, 2026
• hyland pacsgear, pacsgear mediawriter +1 more PACSgear MediaWriter 5.2.1 Unauthenticated RCE via .NET Remoting TCP Service CVE-2026-58127 9.3 CriticalJuly 1, 2026
• hyland pacsgear, pacsgear pacs scan +1 more PACSgear PACS Scan 5.2.1 Unauthenticated RCE via .NET Remoting TCP Service CVE-2026-58126 9.3 CriticalJuly 1, 2026
• hyland alfresco community (transform core), alfresco transformation service (enterprise), alfresco transform core +1 more +3 more Hyland Alfresco Transformation Service Argument Injection RCE CVE-2026-26339 9.3 CriticalFebruary 19, 2026
• hyland alfresco community (transform core), alfresco transformation service (enterprise), alfresco transform core +1 more +3 more Hyland Alfresco Transformation Service SSRF CVE-2026-26338 6.9 MediumFebruary 19, 2026
• hyland alfresco community (transform core), alfresco transformation service (enterprise), alfresco transform core +1 more +3 more Hyland Alfresco Transformation Service Absolute Path Traversal Arbitrary File Read and SSRF CVE-2026-26337 8.8 HighFebruary 19, 2026
• hyland alfresco community, alfresco enterprise, alfresco content services +2 more Hyland Alfresco Improper Authorization Arbitrary File Read CVE-2026-26336 Public exploit 8.7 HighFebruary 19, 2026
• hyland onbase workflow timer service Hyland OnBase Timer Service Unauthenticated .NET Remoting RCE CVE-2026-26221 Public exploit 9.3 CriticalFebruary 13, 2026
• hyland alfresco community edition, alfresco enterprise edition +1 more Hyland Alfresco Community Edition URL s cross site scripting CVE-2025-0557 6.9 MediumJanuary 18, 2025
• hyland alfresco content services A reflected cross-site scripting (XSS) vulnerability in Hyland Alfresco Platform 23.2.1-r96... CVE-2024-40347 6.1 MediumJuly 20, 2024
• hyland alfresco content services An issue was discovered in Hyland Alfresco Community Edition through 7.2.0. By inserting... CVE-2023-49964 Public exploit EPSS 34.7% 8.8 HighDecember 11, 2023
• hyland nuxeo Regular expression Denial of Service in MooTools CVE-2021-32828 5.4 MediumJanuary 5, 2023
• hyland onbase The Hyland Onbase Application Server releases prior to 20.3.58.1000 and OnBase releases 21.1.1... CVE-2022-23342 Public exploit 5.3 MediumJune 21, 2022
• hyland onbase An issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000.... CVE-2020-25247 7.5 HighSeptember 11, 2020
• hyland onbase An issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000.... CVE-2020-25248 7.5 HighSeptember 11, 2020
• hyland onbase An issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. The... CVE-2020-25249 5.3 MediumSeptember 11, 2020
• hyland onbase An issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. Client... CVE-2020-25250 7.5 HighSeptember 11, 2020
• hyland onbase An issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. Client... CVE-2020-25251 9.1 CriticalSeptember 11, 2020
• hyland onbase An issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. CSRF can... CVE-2020-25252 8.8 HighSeptember 11, 2020
• hyland onbase An issue was discovered in Hyland OnBase through 18.0.0.32. It allows SQL injection, as... CVE-2020-25253 9.8 CriticalSeptember 11, 2020
• hyland onbase An issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. It... CVE-2020-25254 9.8 CriticalSeptember 11, 2020
• hyland onbase An issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. It... CVE-2020-25255 7.5 HighSeptember 11, 2020
• hyland onbase An issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. PKI... CVE-2020-25256 9.1 CriticalSeptember 11, 2020
• hyland onbase An issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. It... CVE-2020-25257 9.8 CriticalSeptember 11, 2020
• hyland onbase An issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. It uses... CVE-2020-25258 9.8 CriticalSeptember 11, 2020
• hyland onbase An issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. It uses... CVE-2020-25259 9.8 CriticalSeptember 11, 2020
• hyland onbase An issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. It... CVE-2020-25260 9.8 CriticalSeptember 11, 2020
• hyland perceptive content server A Denial of Service vulnerability in the ImageNow Server service in Hyland Perceptive Content... CVE-2018-19629 Public exploit 7.5 HighJuly 16, 2019
• hyland perceptive document filters In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument... CVE-2018-3855 8.8 HighApril 26, 2018
• hyland perceptive document filters In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, an exploitable stack... CVE-2018-3851 8.8 HighApril 26, 2018
• hyland perceptive document filters In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument... CVE-2018-3845 8.8 HighApril 26, 2018
• hyland perceptive document filters In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted DOCX... CVE-2018-3844 8.8 HighApril 26, 2018
• hyland saperion web client Arbitrary File Read in Saperion Web Client version 7.5.2 83166. CVE-2018-6293 7.5 HighFebruary 13, 2018
• hyland saperion web client Remote Code Execution in Saperion Web Client version 7.5.2 83166. CVE-2018-6292 9.8 CriticalFebruary 13, 2018