CVE-2026-100115
CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass.
Published Oct 13, 2026 · updated Oct 15, 2026 · adobe c2pa
CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 13, 2026 · Catalog
Detected
CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
Oct 14, 2026 · NIST NVD
Updated
CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
Oct 14, 2026 · NIST NVD
Updated
CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
Oct 15, 2026 · NIST NVD
Updated
CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
Affected
- cpe adobe/c2paversion unspecified
- cpe adobe/c2pa-webversion unspecified
- cpe adobe/c2patoolversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-100115
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2026-100115
30-day exploitation probability 0.5%
first.org - NIST NVDVulnerability recordCVE-2026-100115
CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not requir
nvd.nist.gov