4.0Orta
CVE-2026-123260CAI Content Credentials | Improper Input Validation (CWE-20)
Açıklama
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user interaction.
Zayıflık türü (CWE):
CWE-20
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| Adobe | C2PA Tool | ≤ c2patool-v0.28.5, fixed c2patool-v0.28.6 | |
| Adobe | Content Credentials Rust SDK | ≤ c2pa-v0.91.10, fixed c2pa-v0.91.11 |