CVE-2026-48437

Description

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.

Traduire en français

Produits concernés

• Adobe Content Credentials Rust SDK
• Adobe Content Credentials Command-Line Tool
• Adobe Content Credentials JS SDK
• Adobe c2pa
• Adobe c2pa-web
• Adobe c2patool

Scores CVSS

Faiblesses (CWE)

• CWE-295

Références

• https://helpx.adobe.com/security/products/content-authenticity-sdk/apsb26-111.html Vendor Advisory

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories