Skip to content

Secure EU

Menu
  • Home
Menu

CVE-2026-26336 – Hyland Alfresco Improper Authorization Arbitrary File Read

Posted on February 19, 2026
CVE ID : CVE-2026-26336

Published : Feb. 19, 2026, 5:24 p.m. | 38 minutes ago

Description : Hyland Alfresco allows unauthenticated attackers to read arbitrary files from protected directories (like WEB-INF) via the “/share/page/resource/” endpoint, thus leading to the disclosure of sensitive configuration files.

Severity: 8.7 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

©2026 Secure EU | Design: Newspaperly WordPress Theme