CVE-2026-100121

Description

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

Traduire en français

Produits concernés

• Adobe Content Credentials Rust SDK
• Adobe C2PA Tool
• Adobe Content Credentials JS SDK
• Adobe c2pa
• Adobe c2pa-web
• Adobe c2patool

Scores CVSS

Faiblesses (CWE)

• CWE-295

Références

• https://www.adobe.com/trust/security/products/content-credentials-sdk/apsb26-163.html Vendor Advisory

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories