CVE-2026-48438

CVE-2026-48438 affects CAI Content Credentials. A NULL pointer dereference can crash the application, causing denial-of-service. Exploitation is remote with no user interaction (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H; base score 7.5). No fix/version details are provided in the documents.

CVE-2026-48443

Technical details about CVE-2026-48443 are not publicly available in the provided documents; monitor for updates from official sources.

CVE-2026-48439

CVE-2026-48439 affects CAI Content Credentials. It describes an Uncontrolled Resource Consumption vulnerability that could lead to an application denial-of-service. An attacker could exhaust system resources via a network-based vector without user interaction. The NVD/CVE records list a CVSS v3.1...

CVE-2026-48444

CVE-2026-48444 affects CAI Content Credentials and is described as an Integer Overflow/Wraparound vulnerability that could cause an application denial-of-service. The issue could be triggered locally without user interaction and may crash the application (impact: Availability High per the CVSS). ...

CVE-2026-47922

CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability leading to potential privilege escalation. The issue requires user interaction (victim must visit a crafted URL or interact with a compromised page) and has a CVSSv3.1 base score of 4.7 (Medium) with attack ...

CVE-2026-48437

CVE-2026-48437 affects CAI Content Credentials and is due to Improper Certificate Validation, enabling a security feature bypass and unauthorized write access. Exploitation requires user interaction (victim visits a malicious URL or interacts with a compromised page). CVSS 3.1 base score 5.5 (Med...

CVE-2026-48387

CVE-2026-48387 affects CAI Content Credentials and is caused by an integer overflow/wraparound that can crash the application, resulting in a denial-of-service. Exploitation is possible without user interaction and requires local access (per CVSS metrics: AV:L, AC:L, PR:N, UI:N, S:U, A:H). The co...

CVE-2026-48446

CVE-2026-48446 affects CAI Content Credentials. The issue is an Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) that could allow reading arbitrary files on the system outside the intended scope. Exploitation requires user interaction; a victim must visit a malicious U...

CVE-2026-48434

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability (CVE-2026-48434) that could exhaust resources and cause application DoS. Exploitation does not require user interaction and is indicated as local with no privileges required; impact is Availability High, wit...

CVE-2026-48442

CAI Content Credentials is affected by a Path Traversal vulnerability (CVE-2026-48442) that could allow an arbitrary file system read outside restricted directories. The issue arises from an improper limitation of a pathname to a restricted directory. Exploitation does not require user interactio...

CVE-2026-48445

CAI Content Credentials is affected by an Integer Overflow/Wraparound vulnerability (CVE-2026-48445) that could cause an application denial-of-service. According to the sources, exploitation does not require user interaction and the attack vector is local. The CVSS 3.1 data indicates a Medium bas...

CVE-2026-48436

Affected software/area: CAI Content Credentials. Vulnerability type: Improper Input Validation leading to a security feature bypass. Root cause / nature: Input validation flaw could allow bypass of security measures, enabling unauthorized write access. Impact: Security feature bypass with unautho...

CVE-2026-71390

CAI Content Credentials is affected by an Improper Input Validation vulnerability (CWE-20) that could bypass security features and grant unauthorized limited write access. CVE-2026-71390; impact details: local attacker, no user interaction required, with a base CVSSv3.1 score of 4.0 (Medium). Exp...

CVE-2026-48435

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could crash the application, leading to a denial-of-service. Exploitation does not require user interaction and is reported with a LOCAL attack vector (per the CVSS data). The provided documents do...

CVE-2026-71389

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) that can crash the application and cause a denial-of-service. The issue does not require user interaction and is described as a local attack with no privileges required. The available sources (NVD entries and CVE rec...

CVE-2026-76194

The CAI Content Credentials software is affected by an Improper Input Validation vulnerability (CWE-20) that could lead to a Security feature bypass . An attacker could exploit this to gain unauthorized limited write access by tricking a victim into visiting a maliciously crafted URL or interacti...

CVE-2026-100123

The Adobe Content Credentials SDK is affected by an Improper Certificate Validation vulnerability (CWE-295). An attacker can exploit this flaw to bypass security measures and gain unauthorized write access to the file system. This vulnerability can be exploited remotely without user interaction. ...

CVE-2026-100114

The CAI Content Credentials software is affected by an Improper Access Control vulnerability (CWE-284 ), which can lead to a security feature bypass . An attacker could exploit this flaw to bypass security measures and obtain unauthorized write access . The vulnerability is exploitable over the n...

CVE-2026-103296

CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature (CWE-347) vulnerability. This flaw could allow an attacker to bypass security measures and gain unauthorized write access . Exploitation of this vulnerability does not require any user interaction. No speci...

CVE-2026-48378

CAI Content Credentials is impacted by an Improper Input Validation (CWE-20) vulnerability. This flaw allows an attacker to bypass security measures and obtain unauthorized limited write access . The vulnerability does not require user interaction to exploit. No specific remediation information o...

CVE-2026-102501

The CAI Content Credentials software is affected by an Improper Input Validation vulnerability (CWE-20). An attacker can exploit this flaw to bypass security features and obtain unauthorized limited write access without any user interaction. The vulnerability is classified as a Security feature b...

CVE-2026-103297

The CAI Content Credentials software is affected by an Improper Verification of Cryptographic Signature (CWE-347) vulnerability. An attacker could exploit this flaw to bypass security measures and achieve unauthorized write access . The vulnerability does not require any user interaction to explo...

CVE-2026-100119

CAI Content Credentials is impacted by an Improper Input Validation vulnerability (CWE-20). This flaw allows an attacker to bypass security measures to gain unauthorized write access without requiring any user interaction. While the vulnerability's root cause is not specified in detail, it is cat...

CVE-2026-100139

The CAI Content Credentials software is impacted by an Uncontrolled Resource Consumption vulnerability (CWE-400). An attacker can exploit this issue to exhaust system resources, leading to an application denial-of-service condition. This vulnerability is exploitable over the network with low comp...

CVE-2026-105902

The CAI Content Credentials software is impacted by an Uncontrolled Resource Consumption vulnerability (CWE-400). An attacker can exploit this flaw to exhaust system resources, leading to an application denial-of-service condition. The vulnerability does not require any user interaction. No speci...

CVE-2026-89277

The CAI Content Credentials software is vulnerable to an Integer Overflow or Wraparound (CWE-190) vulnerability. An attacker could exploit this flaw to cause an application crash, resulting in a denial-of-service (DoS) condition. Exploitation requires user interaction, such as a victim visiting a...

CVE-2026-95633

The CAI Content Credentials software is affected by an Improper Verification of Cryptographic Signature (CWE-347) vulnerability. An attacker can exploit this flaw to bypass security measures and obtain unauthorized write access without requiring any user interaction. The vulnerability results in ...

CVE-2026-100116

The CAI Content Credentials product is affected by an Improper Certificate Validation vulnerability (CWE-295). This flaw could allow an attacker to bypass security features and gain unauthorized write access . While the exploit does not require user interaction, it depends on conditions beyond th...

CVE-2026-103294

The CAI Content Credentials software is affected by an Improper Certificate Validation (CWE-295) vulnerability. This flaw could allow an attacker to bypass security measures and gain unauthorized write access . The attack vector is network-based with high complexity, and exploitation does not req...

CVE-2026-95632

The CAI Content Credentials software is affected by an Improper Verification of Cryptographic Signature (CWE-347) vulnerability. This flaw allows an attacker to bypass security measures and gain unauthorized write access without any user interaction. The documentation does not provide specific de...

CVE-2026-100136

The CAI Content Credentials software is affected by an Integer Overflow or Wraparound (CWE-190) vulnerability. An attacker can exploit this flaw to crash the application, resulting in a denial-of-service (DoS) condition. This vulnerability can be exploited remotely without requiring any user inte...

CVE-2026-100120

The CAI Content Credentials software is affected by an Improper Input Validation vulnerability (CWE-20) that enables a security feature bypass . An attacker can leverage this flaw to bypass security measures and obtain unauthorized write access without any user interaction. No specific details re...

CVE-2026-100124

The Adobe Content Credentials SDK is affected by an Improper Input Validation vulnerability (CWE-20). An attacker can exploit this flaw to bypass security measures and gain unauthorized write access to the file system without requiring user interaction. Adobe has released a priority 3 security up...

CVE-2026-100125

The CAI Content Credentials software is affected by an Improper Input Validation vulnerability (CWE-20). This flaw could allow an attacker to bypass security measures and gain unauthorized write access , although successful exploitation depends on conditions beyond the attacker's control. The vul...

CVE-2026-100113

The CAI Content Credentials software is affected by an Improper Input Validation vulnerability (CWE-20). An attacker can leverage this flaw to bypass security measures and achieve unauthorized write access . This vulnerability can be exploited over the network without requiring any user interacti...

CVE-2026-104345

The CAI Content Credentials software is affected by an Improper Input Validation vulnerability (CWE-20 ). This flaw allows an attacker to bypass security measures and gain unauthorized write access . Exploitation of this issue does not require any user interaction. No specific exploit details or ...

CVE-2026-100121

The CAI Content Credentials product is affected by an Improper Certificate Validation vulnerability (CWE-295). An attacker could exploit this flaw to bypass security measures and obtain unauthorized write access without requiring any user interaction. The vulnerability is classified with a High b...

CVE-2026-100122

The CAI Content Credentials software is affected by an Improper Certificate Validation vulnerability (CWE-295). This flaw allows an attacker to bypass security features and gain unauthorized write access without requiring any user interaction. While the specific technical root cause is not detail...

CVE-2026-100138

The CAI Content Credentials software is affected by an Uncontrolled Resource Consumption vulnerability (CWE-400 ). An attacker can exploit this flaw to exhaust system resources, leading to an application denial-of-service (DoS) condition. Notably, exploitation of this issue does not require user ...

CVE-2026-95634

The Adobe Content Credentials SDK is affected by a Server-Side Request Forgery (SSRF) vulnerability (CWE-918). This issue allows for privilege escalation and does not require user interaction. While the primary description highlights the SSRF risk, the associated Adobe security bulletin (APSB26-1...

CVE-2026-100117

The CAI Content Credentials software is affected by an Improper Input Validation (CWE-20) vulnerability. This flaw could allow an attacker to bypass security measures and gain unauthorized write access to the system. The vulnerability is exploitable over the NETWORK without requiring any user int...

CVE-2026-100118

The CAI Content Credentials software is affected by an Improper Certificate Validation vulnerability (CWE-295). An attacker can exploit this flaw to bypass security features and achieve unauthorized write access . Exploitation of this issue requires no user interaction. Specific affected versions...

CVE-2026-103820

The CAI Content Credential software is impacted by an Improper Limitation of a Pathname to a Restricted Directory (CWE-22) vulnerability. This path traversal flaw allows an attacker to perform an arbitrary file system write , potentially creating or modifying unauthorized files outside of intende...

CVE-2026-100115

The CAI Content Credentials software is affected by an Improper Access Control vulnerability (CWE-284). This flaw allows an attacker to bypass security measures and gain unauthorized write access without requiring user interaction. The vulnerability has a base CVSS 3.1 score of 7.5 (HIGH) with a ...

CVE-2026-100135

The CAI Content Credentials product is affected by an Improper Input Validation (CWE-20) vulnerability. This flaw allows an attacker to bypass security measures and gain unauthorized write access without requiring user interaction. The vulnerability results in a Security feature bypass with a bas...

CVE-2026-102502

CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature (CWE-347) vulnerability. This flaw could allow an attacker to bypass security measures and obtain unauthorized limited write access . Exploitation of this vulnerability does not require any user interaction...

CVE-2026-48377

The CAI Content Credentials software is impacted by an Improper Input Validation vulnerability (CWE-20) that can lead to a security feature bypass . An attacker could exploit this flaw to gain unauthorized limited write access without requiring any user interaction. No specific exploit details or...

CVE-2026-106627

CAI Content Credentials is affected by an Uncontrolled Resource Consumption (CWE-400) vulnerability. This flaw allows an attacker to exhaust system resources, potentially leading to an application denial-of-service condition. Exploitation of this vulnerability does not require any user interactio...

CVE-2026-100137

The CAI Content Credentials software is affected by an Uncontrolled Resource Consumption vulnerability (CWE-400). An attacker can exploit this flaw to exhaust system resources, leading to an application denial-of-service condition. The vulnerability does not require user interaction to exploit. N...