CVE-2026-103297

HIGH CVSS 7.5
Published: 2026-10-13
Modified: 2026-10-14
Tenable Plugin

Checking the public Tenable catalog…

Threat Intelligence Pending

IOCs, MITRE ATT&CK techniques, and attack chain data are being generated. Refresh in a few seconds.

Description

CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

Quick Facts
CVE ID CVE-2026-103297
CVSS Score 7.5
Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Published 2026-10-13
Exploited No
CISA KEV No
PoC Not public
Affected Products
  • adobe / c2pa
  • adobe / c2pa-web
  • adobe / c2patool