CVE-2026-103297
EUVD-2026-10073713.10.2026, 22:17
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| adobe | c2pa | 𝑥 < 0.91.1 |
| adobe | c2pa-web | 𝑥 < 0.15.3 |
| adobe | c2patool | 𝑥 < 0.28.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration