Approved changes feed: RSS · Atom

cpe:2.3:a:hyland:alfresco_transform_core:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHyland (4cbf6081-43e8-5c1e-b8e8-d0a0dad432d9)
ProductAlfresco Transform Core (d60f86c7-46d1-5c05-af98-520bdc42934e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-26339 vulnerable 2026-06-03 15:18:05.562481 Hyland Alfresco Transformation Service Argument Injection RCE
CRITICAL (9.8)
Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve remote code execution through the argument injection vulnerability, which exists in the document processing functionality.
Published: 2026-02-19T17:04:46.617Z
Updated: 2026-02-20T20:31:03.964Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-26338 vulnerable 2026-06-03 15:18:05.561615 Hyland Alfresco Transformation Service SSRF
CRITICAL (9.8)
Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve server-side request forgery (SSRF) through the document processing functionality.
Published: 2026-02-19T17:03:23.521Z
Updated: 2026-03-02T14:49:40.980Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-26337 vulnerable 2026-06-03 15:18:05.559850 Hyland Alfresco Transformation Service Absolute Path Traversal Arbitrary File Read and SSRF
HIGH (8.2)
Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve both arbitrary file read and server-side request forgery through the absolute path traversal.
Published: 2026-02-19T17:01:25.527Z
Updated: 2026-02-20T19:08:14.840Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.