| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-3967 | Alfresco Activiti Process Variable Serialization System SerializableType.java createObjectInputStream deserialization | Alfresco | Activiti | Medium | 6.3 | 2026-03-12 00:02:10 | Deep Dive |
| CVE-2026-26339 | Hyland Alfresco Transformation Service Argument Injection RCE | Hyland | Alfresco Transformation Service (Enterprise) | Critical | 9.8 | 2026-02-19 17:04:47 | Deep Dive |
| CVE-2026-26338 | Hyland Alfresco Transformation Service SSRF | Hyland | Alfresco Transformation Service (Enterprise) | Critical | 9.8 | 2026-02-19 17:03:24 | Deep Dive |
| CVE-2026-26337 | Hyland Alfresco Transformation Service Absolute Path Traversal Arbitrary File Read and SSRF | Hyland | Alfresco Transformation Service (Enterprise) | High | 8.2 | 2026-02-19 17:01:26 | Deep Dive |
| CVE-2026-26336 | Hyland Alfresco Improper Authorization Arbitrary File Read | Hyland | Alfresco Enterprise | High | 7.5 | 2026-02-19 15:56:26 | Deep Dive |
| CVE-2025-0557 | Hyland Alfresco Community Edition URL s cross site scripting | Hyland | Alfresco Community Edition | Medium | 4.3 | 2025-01-18 09:00:11 | Deep Dive |