critical9.8
CVE-2026-26339
Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve remote code execution through the argument injection vulnerability, which ex…
Impact
Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve remote code execution through the argument injection vulnerability, which exists in the document processing functionality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hyland | Alfresco Transform Service | before 4.2.3 |
| Hyland | Alfresco Transform Core | before 5.2.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://connect.hyland.com/t5/alfresco-blog/security-update-cve-2026-26337-cve-2026-26338-cve-2026-26339/ba-p/496551
- https://www.hyland.com/en/solutions/products/alfresco-platform
- https://www.vulncheck.com/advisories/hyland-alfresco-transformation-service-argument-injection-rce