CVE-2026-104345
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.
Published Oct 13, 2026 · updated Oct 14, 2026 · adobe c2pa
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
Timeline
Detection, updates, and resolution for this record.
Oct 13, 2026 · Catalog
Detected
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
Oct 14, 2026 · NIST NVD
Updated
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
Oct 14, 2026 · NIST NVD
Updated
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
Affected
- cpe adobe/c2paversion unspecified
- cpe adobe/c2pa-webversion unspecified
- cpe adobe/c2patoolversion unspecified
Sources
- CVE.orgCVE-2026-104345
Official CVE identifier
cve.org - FIRST EPSSCVE-2026-104345
30-day exploitation probability 0.5%
first.org - NIST NVDCVE-2026-104345
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not requ
nvd.nist.gov