← CVE Intelligence

CVE-2026-95634

CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918) PUBLISHED

Description (CNA)

CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

Affected (CNA)

Vendor / productVersions
Adobe / Content Credentials Rust SDKaffected 0 through c2pa-v0.90.15; unaffected c2pa-v0.91.1
Adobe / C2PA Toolaffected 0 through c2patool-v0.27.15; unaffected v0.28.1
Adobe / Content Credentials JS SDKaffected 0 through @contentauth/c2pa-web@0.13.4; unaffected @contentauth/c2pa-web@0.15.3

CWE

CWE-918

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.