PT-2026-58831 · Adobe · Content Credentials Command-Line Tool+6

Publicado 2026-07-14 · Atualizado 2026-07-14 · CVE-2026-48290

NVD

CVSS v3.1

8.2

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

Correção

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2026-48290

Produtos afetados

Content Credentials Command-Line Tool

Content Credentials Js Sdk

Content Credentials Rust Sdk

C2Pa-Js

C2Pa-Rs

C2Patool

Contentauthenticity.Org

Referências · 2

• https://helpx.adobe.com/security/products/content-authenticity-sdk/apsb26-80.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-48290 · Nota de Segurança