Hyland Alfresco Community (Transform Core) vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Hyland Alfresco Community (Transform Core): 3 record(s), with affected versions and fixes.
CVE-2026-26339
Critical · 9.8
CWE-918 Feb 19, 2026
Hyland Alfresco Transformation Service Argument Injection RCE
Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve remote code execution through the argument injection vulnerability, which exists in the document processing functionality.
CVE-2026-26338
Critical · 9.8
CWE-918 Feb 19, 2026
Hyland Alfresco Transformation Service SSRF
Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve server-side request forgery (SSRF) through the document processing functionality.
CVE-2026-26337
High · 8.2
CWE-36 Feb 19, 2026
Hyland Alfresco Transformation Service Absolute Path Traversal Arbitrary File Read and SSRF
Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve both arbitrary file read and server-side request forgery through the absolute path traversal.