Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-26337 1 Hyland 2 Alfresco Community, Alfresco Transformation Service 2026-02-20 8.2 High
Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve both arbitrary file read and server-side request forgery through the absolute path traversal.
CVE-2026-26338 1 Hyland 2 Alfresco Community, Alfresco Transformation Service 2026-02-20 6.5 Medium
Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve server-side request forgery (SSRF) through the document processing functionality.
CVE-2026-26339 1 Hyland 2 Alfresco Community, Alfresco Transformation Service 2026-02-20 9.8 Critical
Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve remote code execution through the argument injection vulnerability, which exists in the document processing functionality.