Known vulnerabilities in C2PA Tool 0.26.25

Vendor: Adobe
Software: C2PA Tool
Version: 0.26.25
Software CPE: cpe:2.3:a:adobe:c2pa_tool:*:*:*:*:*:*:*:*
Total vulnerabilities: 15
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting C2PA Tool version 0.26.25 C2PA Tool 0.26.25 is affected by 15 vulnerabilities: 6 medium, 9 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU142522 - Server-Side Request Forgery (SSRF)
CVE-2026-47922
CWE-918 Medium
No
No
0.27.6 14.08.2026 SB20260814111
#VU142523 - Improper input validation
CVE-2026-71390
CWE-20 Low
No
No
0.27.6 14.08.2026 SB20260814111
#VU142521 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-48446
CWE-22 Medium
No
No
0.27.6 14.08.2026 SB20260814111
#VU142519 - Integer underflow
CVE-2026-71389
CWE-191 Low
No
No
0.27.6 14.08.2026 SB20260814111
#VU142520 - Improper Certificate Validation
CVE-2026-48437
CWE-295 Medium
No
No
0.27.6 14.08.2026 SB20260814111
#VU142517 - Integer overflow
CVE-2026-48444
CWE-190 Low
No
No
0.27.6 14.08.2026 SB20260814111
#VU142518 - Resource exhaustion
CVE-2026-48443
CWE-400 Low
No
No
0.27.6 14.08.2026 SB20260814111
#VU142515 - Integer overflow
CVE-2026-48445
CWE-190 Low
No
No
0.27.6 14.08.2026 SB20260814111
#VU142516 - Resource exhaustion
CVE-2026-48434
CWE-400 Low
No
No
0.27.6 14.08.2026 SB20260814111
#VU142513 - Integer overflow
CVE-2026-48387
CWE-190 Low
No
No
0.27.6 14.08.2026 SB20260814111
#VU142514 - Integer underflow
CVE-2026-48435
CWE-191 Low
No
No
0.27.6 14.08.2026 SB20260814111
#VU142511 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-48442
CWE-22 Low
No
No
0.27.6 14.08.2026 SB20260814111
#VU142512 - Improper input validation
CVE-2026-48436
CWE-20 Medium
No
No
0.27.6 14.08.2026 SB20260814111
#VU142510 - NULL Pointer Dereference
CVE-2026-48438
CWE-476 Medium
No
No
0.27.6 14.08.2026 SB20260814111
#VU142509 - Resource exhaustion
CVE-2026-48439
CWE-400 Medium
No
No
0.27.6 14.08.2026 SB20260814111