CVE-2026-100118EPSS p25.9%

CVE-2026-100118CVE-2026-100118

adobe / c2pa

Description

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

Scoring

CVSS 7.5 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS0.34% probability of exploitation · percentile 25.9% · 2026-10-17T12:00:28Z
Last modified2026-10-17
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.