Security Advisory
CVE-2026-26336
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Hyland Alfresco allows unauthenticated attackers to read arbitrary files from protected directories (like WEB-INF) via the "/share/page/resource/" endpoint, thus leading to the disclosure of sensitive configuration files.