Alfresco CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Alfresco CVE published 2026-10-25

CVE-2026-116058

A code injection vulnerability exists in Alfresco Activiti's JuelScriptEngine.java file, specifically in the JuelScriptEngine.eval function. This issue affects Alfresco Activiti up to version 7.21.0-rc.692 and can be exploited remotely. The vulnerability allows an attacker to inject malicious code, potentially leading to unauthorized access or modifications. Defenders should assess the exposure of their d [truncated]