CVE-2026-103294: CAI Content Credentials | Improper Certificate Validation (CWE-295)
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.
Affected Software
Event History
Frequently Asked Questions
Does exploitation require authentication or user interaction?
No privileges or user interaction are required. The attack is network-reachable, but exploitation has high complexity and depends on conditions beyond the attacker’s control.
What is the expected security impact?
The reported impact is unauthorized write access through a security-feature bypass. Integrity is affected; no confidentiality or availability impact is identified.
How can I determine whether my deployment is in scope?
The affected software is identified as Content Authenticity Initiative Content Credentials. The provided information does not specify affected or fixed versions.