CVE-2026-48437
EUVD-2026-5655911.08.2026, 17:18
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| adobe | c2pa | 𝑥 < 0.90.6 |
| adobe | c2pa-web | 𝑥 < 0.12.1 |
| adobe | c2patool | 𝑥 < 0.27.6 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration