high8.6
CVE-2026-95634
CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.
Impact
CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | C2pa | before 0.91.1 |
| Adobe | C2pa-Web | before 0.15.3 |
| Adobe | C2patool | before 0.28.1 |