Vulnerability Description
Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve remote code execution through the argument injection vulnerability, which exists in the document processing functionality.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Hyland | Alfresco Transform Service | < 4.2.3 |
| Hyland | Alfresco Transform Core | < 5.2.4 |
Related Weaknesses (CWE)
References
- https://connect.hyland.com/t5/alfresco-blog/security-update-cve-2026-26337-cve-2Vendor Advisory
- https://www.hyland.com/en/solutions/products/alfresco-platformProduct
- https://www.vulncheck.com/advisories/hyland-alfresco-transformation-service-arguThird Party Advisory
FAQ
What is CVE-2026-26339?
CVE-2026-26339 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve remote code execution through the argument injection vulnerability, which exists in the document processing functiona...
How severe is CVE-2026-26339?
CVE-2026-26339 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-26339?
Check the references section above for vendor advisories and patch information. Affected products include: Hyland Alfresco Transform Service, Hyland Alfresco Transform Core.