Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 8 products
CVE-2026-48290 Server-Side Request Forgery and Arbitrary Code Execution in CAI Content Credentials https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-48290
Post summary
CVE‑2026‑48290 is disclosed as a server‑side request forgery and arbitrary code execution issue in CAI Content Credentials, with limited details and no known patches or exploit code available.
8 of 8 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | adobe | c2pa | - | rust | - |
| App | adobe | c2pa-web | - | node.js | - |
| App | adobe | c2patool | - | - | - |
| OS | apple | iphone_os | - | - | - |
| OS | apple | macos | - | - | - |
| OS | android | - | - | - | |
| OS | linux | linux_kernel | - | - | - |
| OS | microsoft | windows | - | - | - |