Unrated severityNVD Advisory· Published Feb 19, 2026· Updated Mar 23, 2026
Hyland Alfresco Improper Authorization Arbitrary File Read
CVE-2026-26336
Description
Hyland Alfresco allows unauthenticated attackers to read arbitrary files from protected directories (like WEB-INF) via the "/share/page/resource/" endpoint, thus leading to the disclosure of sensitive configuration files.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: 0
Patches
Vulnerability mechanics
References
3- connect.hyland.com/t5/alfresco-blog/cve-2026-26336-unauthenticated-arbitrary-file-read-in-alfresco/ba-p/496550mitrevendor-advisorypatch
- www.vulncheck.com/advisories/hyland-alfresco-improper-authorization-arbitrary-file-readmitrethird-party-advisory
- www.hyland.com/en/solutions/products/alfresco-platformmitreproduct
News mentions
0No linked articles in our index yet.