Read the docs

Hyland

Records35All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical14CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9

Exploited now

Hyland records in CISA KEV

No Hyland vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Onbase 15 records MEDIUM Perceptive Document Filters 4 records MEDIUM Alfresco Content Services 3 records MEDIUM Alfresco Transform Core 3 records MEDIUM Alfresco Transform Service 3 records MEDIUM Pacsgear 2 records HIGH Saperion Web Client 2 records MEDIUM Nuxeo 1 record MEDIUM

Records

3 records in Alfresco Transform Core · all components

TI-2026-21295 CVE-2026-26339 · GHSA-w8hr-79rx-368j

Hyland Alfresco Transformation Service Argument Injection RCE

Priority MEDIUM 49

Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve remote code execution through the argument injection vulnerability, which exists in the document processing functionality.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00632 Published 2026-02-19 Fixed in 4.2.3, 5.2.4 CWE-918
TI-2026-21294 CVE-2026-26338 · GHSA-cg7h-phwj-q3qc

Hyland Alfresco Transformation Service SSRF

Priority LOW 37

Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve server-side request forgery (SSRF) through the document processing functionality.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00418 Published 2026-02-19 Fixed in 4.3.0, 5.3.0 CWE-918
Open these records in search →