{"id":"CVE-2026-95634","published":"2026-10-13T22:19:30.853","lastModified":"2026-10-15T18:42:11.487","description":"CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.","cvssScore":8.6,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","cwes":["CWE-918"],"vendors":["adobe"],"products":["c2pa","c2pa-web","c2patool"],"references":[{"url":"https://www.adobe.com/trust/security/products/content-credentials-sdk/apsb26-163.html","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":null}