3 matches found
CVE-2026-26336
Hyland Alfresco allows unauthenticated attackers to read arbitrary files from protected directories like WEB-INF via the "/share/page/resource/" endpoint, thus leading to the disclosure of sensitive configuration files...
8.7CVSS5.7AI score0.00713EPSS
SaveExploits1References1
CVE-2026-26336
Hyland Alfresco allows unauthenticated attackers to read arbitrary files from protected directories like WEB-INF via the "/share/page/resource/" endpoint, thus leading to the disclosure of sensitive configuration files...
8.7CVSS0.00713EPSS
SaveExploits1References3
CVE-2026-26336: Incorrect Authorization
Hyland Alfresco allows unauthenticated attackers to read arbitrary files from protected directories like WEB-INF via the "/share/page/resource/" endpoint, thus leading to the disclosure of sensitive configuration files...
8.7CVSS5.9AI score0.00713EPSS
SaveExploits1References1
20