← Back

CVE-2026-47922

nvd nist
Published: Aug 11, 2026Modified: Aug 28, 2026

JSON object

Loading...
4.7
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
Exploitability: 2.8 / Impact: 1.4
Source: psirt@adobe.com (Secondary)

Description

CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

Affected (3)

Adobe
3 products
C2pa
C2pa Web
C2patool
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
C2pa
Before 0.90.6
C2pa Web
Before 0.12.1
C2patool
Before 0.27.6

Related CWEs

CWE-918
Server-Side Request Forgery (SSRF)
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

References (1)

Source: psirt@adobe.com
Vendor Advisory

Timeline

No history available yet.