CVE-2026-47922

Description

CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

Traduire en français

Produits concernés

• Adobe Content Credentials Rust SDK
• Adobe Content Credentials Command-Line Tool
• Adobe Content Credentials JS SDK
• Adobe c2pa
• Adobe c2pa-web
• Adobe c2patool

Scores CVSS

Faiblesses (CWE)

• CWE-918

Références

• https://helpx.adobe.com/security/products/content-authenticity-sdk/apsb26-111.html Vendor Advisory

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories