What’s Vulnerable › Products

Adobe C2Pa vulnerabilities

94 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 94 published in the last 12 months.

Check whether your Adobe C2Pa version is affected

Latest Adobe C2Pa vulnerabilities

• CVE-2026-95634 — CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918) (CVSS 8.6)
• CVE-2026-95633 — CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) (CVSS 7.5)
• CVE-2026-95632 — CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) (CVSS 7.5)
• CVE-2026-48378 — CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 5.3)
• CVE-2026-48377 — CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 5.3)
• CVE-2026-106627 — CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 7.5)
• CVE-2026-105902 — CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 7.5)
• CVE-2026-104345 — CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 7.5)
• CVE-2026-103820 — CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 5.5)
• CVE-2026-103297 — CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) (CVSS 7.5)
• CVE-2026-103296 — CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) (CVSS 7.5)
• CVE-2026-103294 — CAI Content Credentials | Improper Certificate Validation (CWE-295) (CVSS 5.9)
• CVE-2026-102502 — CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) (CVSS 5.3)
• CVE-2026-102501 — CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 5.3)
• CVE-2026-100139 — CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 7.5)
• CVE-2026-100138 — CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 7.5)
• CVE-2026-100137 — CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 7.5)
• CVE-2026-100136 — CAI Content Credentials | Integer Overflow or Wraparound (CWE-190) (CVSS 7.5)
• CVE-2026-100135 — CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 7.5)
• CVE-2026-100125 — CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 5.9)
• CVE-2026-100124 — CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 7.5)
• CVE-2026-100123 — CAI Content Credentials | Improper Certificate Validation (CWE-295) (CVSS 7.5)
• CVE-2026-100122 — CAI Content Credentials | Improper Certificate Validation (CWE-295) (CVSS 7.5)
• CVE-2026-100121 — CAI Content Credentials | Improper Certificate Validation (CWE-295) (CVSS 7.5)
• CVE-2026-100120 — CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 7.5)