Is CVE-2026-110359 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-110359?

CVE-2026-110359 has a CVSS v3 severity of HIGH (7.8).

Back

CVE-2026-110359

Description

Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privileged service running from the %PROGRAMDATA%\Hyland\DesktopHost\bin folder with weak permissions. A local user can exploit this to escalate privileges.