CVE-2026-26337

Publication date

2026-02-19 17:01:25

Family

VulnCheck

State

PUBLISHED

Description

Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve both arbitrary file read and server-side request forgery through the absolute path traversal.