CVE-2026-100116: CAI Content Credentials | Improper Certificate Validation (CWE-295)
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.
Affected Software
Event History
Frequently Asked Questions
Does exploitation require authentication or user interaction?
No privileges and no user interaction are required. The attack is network-reachable, but exploitation has high complexity because it depends on conditions beyond the attacker’s control.
What is the expected impact if the vulnerability is exploited?
An attacker could bypass a security feature and gain unauthorized write access. The provided impact assessment indicates integrity impact only, with no stated confidentiality or availability impact.
How can I determine whether my deployment is affected?
The supplied information identifies CAI Content Credentials as affected but does not provide affected versions, fixed versions, configuration prerequisites, or detection indicators. Consult the referenced vendor advisory for version and remediation details.