CVE Catalog
CVE-2026-26338
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.36%
28th percentile - higher than 28% of all known CVEs
Summary
A vulnerability in Hyland Alfresco Transformation Service allows unauthenticated attackers to perform Server-Side Request Forgery (SSRF) through the document processing functionality.
Risk Assessment
An attacker can exploit SSRF to scan the internal network, access sensitive data, or launch further attacks against internal systems.
Recommendation
Immediately update Hyland Alfresco Transformation Service to the latest patched version and restrict access to the service to trusted networks only.
Original NVD description (English source)
Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve server-side request forgery (SSRF) through the document processing functionality.