NetSight
critical9.8

CVE-2026-26338

Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve server-side request forgery (SSRF) through the document processing functiona…

Impact

Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve server-side request forgery (SSRF) through the document processing functionality.

Affected products

VendorProductAffected versions
HylandAlfresco Transform Service
before 4.3
HylandAlfresco Transform Core
before 5.3.0
Version 5.3.0

Weakness classification

References