Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve server-side request forgery (SSRF) through the document processing functionality.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
CVE-2026-26338 Server-Side Request Forgery Vulnerability in Hyland Alfresco Transformation Service https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-26338
Post summary
The text announces the discovery of a Server‑Side Request Forgery vulnerability (CVE‑2026‑26338) in Hyland Alfresco Transformation Service, linking to a Vulmon page for further details.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | hyland | alfresco_transform_core | - | - | - |
| App | hyland | alfresco_transform_core | 5.3.0 | - | - |
| App | hyland | alfresco_transform_service | - | - | - |