Alfresco Transform Core vulnerabilities

3 known vulnerabilities in Alfresco Transform Core from Hyland. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Alfresco Transformation Service (Enterprise): Server-Side Request Forgery

  CVE-2026-26339Feb 19, 2026Hyland

  Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve remote code execution through the argument injection vulnerability, which exists in the document processing functionality.

• 9.8 Critical severity

  Alfresco Transformation Service (Enterprise): Server-Side Request Forgery

  CVE-2026-26338Feb 19, 2026Hyland

  Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve server-side request forgery (SSRF) through the document processing functionality.

• 8.2 High severity

  Alfresco Transformation Service (Enterprise): Absolute Path Traversal

  CVE-2026-26337Feb 19, 2026Hyland

  Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve both arbitrary file read and server-side request forgery through the absolute path traversal.