Hyland Alfresco Transform Core vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Hyland Alfresco Transform Core: 3 record(s), with affected versions and fixes.cpe:2.3:a:hyland:alfresco_transform_core
CVE-2026-26339
Critical · 9.8
CWE-918 Feb 19, 2026
Hyland Alfresco Transformation Service Argument Injection RCE
Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve remote code execution through the argument injection vulnerability, which exists in the document processing functionality.
CVE-2026-26338
Critical · 9.8
CWE-918 Feb 19, 2026
Hyland Alfresco Transformation Service SSRF
Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve server-side request forgery (SSRF) through the document processing functionality.
CVE-2026-26337
High · 8.2
CWE-36 Feb 19, 2026
Hyland Alfresco Transformation Service Absolute Path Traversal Arbitrary File Read and SSRF
Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve both arbitrary file read and server-side request forgery through the absolute path traversal.