ZeroDay Findings
Sign inSign up

Findings

CVE-2026-95634

CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.

Published Oct 13, 2026 · updated Oct 14, 2026 · Adobe Content Credentials Rust SDK

CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 13, 2026 · Catalog

    Detected

    CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

  2. Oct 14, 2026 · CIRCL Vulnerability Lookup

    Updated

    CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

  3. Oct 14, 2026 · NIST NVD

    Updated

    CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

Affected

  • vendor Adobe C2PA Toolversion unspecified
  • vendor Adobe Content Credentials JS SDKversion unspecified
  • vendor Adobe Content Credentials Rust SDKversion unspecified

Sources

  • CIRCL Vulnerability LookupCVE-2026-95634

    CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

    vulnerability.circl.lu
  • CVE.orgCVE-2026-95634

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2026-95634

    30-day exploitation probability 0.5%

    first.org
  • NIST NVDCVE-2026-95634

    CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

    nvd.nist.gov

References