Findings

CVE-2026-103294

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass.

Published Oct 13, 2026 · updated Oct 14, 2026 · adobe c2pa

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 13, 2026 · Catalog

    Detected

    CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.

  2. Oct 14, 2026 · NIST NVD

    Updated

    CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.

  3. Oct 14, 2026 · NIST NVD

    Updated

    CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.

Affected

  • cpe adobe/c2paversion unspecified
  • cpe adobe/c2pa-webversion unspecified
  • cpe adobe/c2patoolversion unspecified

Sources

  • CVE.orgCVE-2026-103294

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2026-103294

    CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyo

    nvd.nist.gov

References