Hyland Alfresco Content Services vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Hyland Alfresco Content Services: 1 record(s), with affected versions and fixes.
cpe:2.3:a:hyland:alfresco_content_services

CVE-2026-26336 High · 7.5 CWE-863 Feb 19, 2026

Hyland Alfresco Improper Authorization Arbitrary File Read

Hyland Alfresco allows unauthenticated attackers to read arbitrary files from protected directories (like WEB-INF) via the "/share/page/resource/" endpoint, thus leading to the disclosure of sensitive configuration files.