ZeroDay Findings
Sign inSign up

Findings

CVE-2026-102502

CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass.

Published Oct 13, 2026 · updated Oct 14, 2026 · adobe c2pa

CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user interaction.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 13, 2026 · Catalog

    Detected

    CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user interaction.

  2. Oct 14, 2026 · NIST NVD

    Updated

    CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user interaction.

  3. Oct 14, 2026 · NIST NVD

    Updated

    CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user interaction.

Affected

  • cpe adobe/c2paversion unspecified
  • cpe adobe/c2pa-webversion unspecified
  • cpe adobe/c2patoolversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-102502

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2026-102502

    30-day exploitation probability 0.4%

    first.org
  • NIST NVDVulnerability recordCVE-2026-102502

    CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitat

    nvd.nist.gov

References