cbcvebase.

Hyland Onbase Workflow Timer Service vulnerabilities

1 known vulnerability affecting hyland/onbase_workflow_timer_service.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2026-26221P2CRITICALCVSS 9.8≥ 8.0, ≤ 17.0.02026-02-13
CVE-2026-26221 [CRITICAL] CWE-502 CVE-2026-26221: Hyland OnBase contains an unauthenticated .NET Remoting exposure in the OnBase Workflow Timer Servic Hyland OnBase contains an unauthenticated .NET Remoting exposure in the OnBase Workflow Timer Service (Hyland.Core.Workflow.NTService.exe). An attacker who can reach the service can send crafted .NET Remoting requests to default HTTP channel endpoints on TCP/8900 (e.g., TimerServiceAPI.rem and TimerServiceEvents.rem for Workflow) to trigger unsafe
nvd
Hyland Onbase Workflow Timer Service vulnerabilities | cvebase