CVE-2026-100135
7.5HighPublished 13 Oct 2026 · NVD status: Analyzed · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on integrity
- Weakness
- CWE-20
Impact
Remote attackers can bypass security protections and obtain unauthorized write access without authentication or user interaction. They only require network access to submit malformed input to the CAI Content Credentials component.
Root cause
Improper input validation fails to verify incoming data, permitting a security feature bypass.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Fix & remediation
Upgrade to the patched version detailed in Adobe advisory APSB26-163; no interim mitigations or configuration workarounds are provided.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.