VulnSocial

CVE-2026-26337Disclosure(hyland / alfresco_transform_core)

LOWCVSS 8.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve both arbitrary file read and server-side request forgery through the absolute path traversal.

hyland CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-36

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • alfresco_transform_core
  • alfresco_transform_service

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Vendors
hyland
Products
alfresco_transform_corealfresco_transform_service

1 version affected across 2 products

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-02-19: 2Technical Details · 2026-02-19: 202-19
Signal classification1 categories
Disclosure
2100.0%
Referenced assets3 URLs
Full discourse2 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-26337 Unauthenticated Arbitrary File Read and SSRF in Hyland Al... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-26337 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2

    Post summary

    The tweet announces CVE-2026-26337, describing it as an unauthenticated arbitrary file read and SSRF vulnerability in Hyland Al, without any mention of PoC or active exploitation.

    0001041
    4.0K followersView on X
  • CVETodo@CveTodo
    Disclosure

    **CVE-2026-26337** pertains to a security flaw within the **Hyland Alfresco Transformation Service**. The vulnerability allows **unauthenticated attackers** to exploit **absolute path traversal** to perform **arbitrary file read** and **Server-Side Request Forgery (SSRF)** attacks. #Cybersecurity #CVE #HighSeverity #SecurityAlert #RemoteCodeExecution https://cvetodo.com/cve/CVE-2026-26337

    Post summary

    A high‑severity vulnerability (CVE‑2026‑26337) in Hyland Alfresco Transformation Service allows unauthenticated attackers to perform absolute path traversal for arbitrary file reads and SSRF, but no PoC or exploit code is referenced.

    0000043
    20 followersView on X
CPE platform detail3 entries

3 of 3 entries

PartVendorProductVersionTarget SWTarget HW
Apphylandalfresco_transform_core---
Apphylandalfresco_transform_core5.3.0--
Apphylandalfresco_transform_service---

Explore more

Back to dashboardhyland CVEsalfresco_transform_core vulnerabilities