Опубликовано: 19 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 9.3
CVSS3: 9.8
Описание
Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve remote code execution through the argument injection vulnerability, which exists in the document processing functionality.
Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve remote code execution through the argument injection vulnerability, which exists in the document processing functionality.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2026-26339
- https://connect.hyland.com/t5/alfresco-blog/security-update-cve-2026-26337-cve-2026-26338-cve-2026-26339/ba-p/496551
- https://www.hyland.com/en/solutions/products/alfresco-platform
- https://www.vulncheck.com/advisories/hyland-alfresco-transformation-service-argument-injection-rce
EPSS
Процентиль: 48%
0.00247
Низкий
9.3 Critical
CVSS4
9.8 Critical
CVSS3
CVE ID
Дефекты
CWE-918
Связанные уязвимости
CVSS3: 9.8
nvd
3 месяца назад
Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve remote code execution through the argument injection vulnerability, which exists in the document processing functionality.
EPSS
Процентиль: 48%
0.00247
Низкий
9.3 Critical
CVSS4
9.8 Critical
CVSS3
CVE ID
Дефекты
CWE-918