Hyland Alfresco Transformation Service Server-Side Request Forgery Vulnerability

Vulnerability

A server-side request forgery (SSRF) vulnerability has been identified in Hyland Alfresco Transformation Service. This issue allows unauthenticated attackers to exploit the document processing functionality, potentially leading to unauthorized requests being sent from the server.

Impact

Exploitation of this vulnerability allows for server-side request forgery, where an attacker can make the server send requests on its behalf. This could be used to access internal services or resources that are not normally exposed to the outside world.

Added: Feb 19, 2026, 7:18 PM
Updated: Feb 19, 2026, 7:18 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
0.6
exploitability
6.8
remediation
0.0
relevance
3.2
threat
0.0
urgency
2.9
incentive
4.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.