CVE-2026-103297: CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)
Published Oct 13, 2026
·Updated
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
Affected Software
1 affected component
CAI Content Credentials
Event History
Oct 13, 2026
CVE Published
via MITRE·09:27 PM
Data Sourced
via MITRE·09:27 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does an attacker need an account or other privileges to exploit this issue?
No. The CVSS vector indicates that no privileges are required, and the attack vector is network-based with low complexity.
2
What is the expected security impact if exploitation succeeds?
The reported impact is high to integrity, with no reported confidentiality or availability impact. The described outcome is unauthorized write access through a security-feature bypass.
3
Does exploitation depend on user interaction?
No. User interaction is not required for exploitation.