CVE-2026-103294
CVE-2026-103294 · CAI Content Credentials | Improper Certificate Validation (CWE-295)
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.
CVSS 5.9 · Moyenne · EPSS 0,2%
- Publication
- Mise à jour
Produits et versions concernés
content credentials rust sdk
- Versions du logiciel
- ≥ 0, ≤ c2pa-v0.90.15: Concernée (custom)
- c2pa-v0.91.1: Non concernée (custom)
Aucun correctif publié
c2pa tool
- Versions du logiciel
- ≥ 0, ≤ c2patool-v0.27.15: Concernée (custom)
- v0.28.1: Non concernée (custom)
Aucun correctif publié
content credentials js sdk
- Versions du logiciel
- ≥ 0, ≤ @contentauth/[email protected]: Concernée (custom)
- @contentauth/[email protected]: Non concernée (custom)
Aucun correctif publié