CVE-2026-71390EPSS p17.4%

CVE-2026-71390CVE-2026-71390

adobe / c2pa

Description

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user interaction.

Scoring

CVSS 4.0 ()
VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS0.27% probability of exploitation · percentile 17.4% · 2026-10-05T12:00:23Z
Last modified2026-08-28
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.