Vulnerability Details CVE-2026-26339
Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve remote code execution through the argument injection vulnerability, which exists in the document processing functionality.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 46.6%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2026-26339
-
cpe:2.3:a:hyland:alfresco_transform_core:*
-
cpe:2.3:a:hyland:alfresco_transform_service:*