CVE-2026-100122: CAI Content Credentials | Improper Certificate Validation (CWE-295)
Published Oct 13, 2026
·Updated
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
Affected Software
1 affected component
CAI Content Credentials
Event History
Oct 13, 2026
CVE Published
via MITRE·09:27 PM
Data Sourced
via MITRE·09:27 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require authentication or user interaction?
No. The CVSS vector indicates that no privileges are required and no user interaction is needed for exploitation.
2
What is the primary security impact?
The issue can allow unauthorized write access through a security-feature bypass. The CVSS vector rates integrity impact as high, with no confidentiality or availability impact indicated.