Hyland Alfresco Transformation Service (Enterprise) vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Hyland Alfresco Transformation Service (Enterprise): 3 record(s), with affected versions and fixes.
CVE-2026-26339
Critical · 9.8
CWE-918 Feb 19, 2026
Hyland Alfresco Transformation Service Argument Injection RCE
Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve remote code execution through the argument injection vulnerability, which exists in the document processing functionality.
CVE-2026-26338
Critical · 9.8
CWE-918 Feb 19, 2026
Hyland Alfresco Transformation Service SSRF
Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve server-side request forgery (SSRF) through the document processing functionality.
CVE-2026-26337
High · 8.2
CWE-36 Feb 19, 2026
Hyland Alfresco Transformation Service Absolute Path Traversal Arbitrary File Read and SSRF
Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve both arbitrary file read and server-side request forgery through the absolute path traversal.