CVE-2026-110359

CVSS 7.8 (high) · published 2026-10-14

Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privileged service running from the %PROGRAMDATA%\Hyland\DesktopHost\bin folder with weak permissions. A local user can exploit this to escalate privileges.

Weakness: CWE-276

Source: NVD CVE-2026-110359

References

• https://github.com/JNDataRT/Vulns/blob/main/Advisories/2026/1.md

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.