Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-26338

Hyland Alfresco Transformation Service SSRF

Description

Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve server-side request forgery (SSRF) through the document processing functionality.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hyland Alfresco Transformation Service (Enterprise)

Default version status: unaffected

  • 0 to < 4.3.0affected

Hyland Alfresco Community (Transform Core)

Default version status: unaffected

  • 0 to < 5.3.0affected
pkg:github/Alfresco/alfresco-transform-core

References