CVE-2026-95634: CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918)
Published Oct 13, 2026
·Updated
CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.
Affected Software
1 affected component
CAI Content Credentials
Event History
Oct 13, 2026
CVE Published
via MITRE·09:27 PM
Data Sourced
via MITRE·09:27 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Can this be exploited remotely without credentials or user interaction?
Yes. The supplied CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
2
What security impact is indicated?
The vulnerability may enable privilege escalation through SSRF. The vector indicates high confidentiality impact, no integrity impact, and no availability impact, with impact extending beyond the vulnerable component's original security authority.