Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Hyland Component: Alfresco Transform Core Clear all filters
TI-2026-21295 CVE-2026-26339 · GHSA-w8hr-79rx-368j

Hyland Alfresco Transformation Service Argument Injection RCE

Priority MEDIUM 49

Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve remote code execution through the argument injection vulnerability, which exists in the document processing functionality.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00632 Published 2026-02-19 Fixed in 4.2.3, 5.2.4 CWE-918
TI-2026-21294 CVE-2026-26338 · GHSA-cg7h-phwj-q3qc

Hyland Alfresco Transformation Service SSRF

Priority LOW 37

Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve server-side request forgery (SSRF) through the document processing functionality.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00418 Published 2026-02-19 Fixed in 4.3.0, 5.3.0 CWE-918