Threat database

3 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.3	EPSS 0.6%	CVE-2026-26339Hyland Alfresco Transformation Service (Enterprise) · Server-Side Request Forgery (SSRF) Critical9.3EPSS 0.6%2026-02-19CVE Database V5CVE-2026-26339 Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve remote code execution through the argument injection vulnerability, which exists in the document processing functionality. EPSS 0.6%Vulnerability CWE-918	CVE Database V5	2026-02-19
Medium	6.9	EPSS 0.4%	CVE-2026-26338Hyland Alfresco Transformation Service (Enterprise) · Server-Side Request Forgery (SSRF) Medium6.9EPSS 0.4%2026-02-19CVE Database V5CVE-2026-26338 Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve server-side request forgery (SSRF) through the document processing functionality. EPSS 0.4%Vulnerability CWE-918	CVE Database V5	2026-02-19
High	8.8	EPSS 0.4%	CVE-2026-26337Hyland Alfresco Transformation Service (Enterprise) · Absolute Path Traversal High8.8EPSS 0.4%2026-02-19CVE Database V5CVE-2026-26337 Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve both arbitrary file read and server-side request forgery through the absolute path traversal. EPSS 0.4%Vulnerability CWE-36	CVE Database V5	2026-02-19

Page 1 of 1