CVE-2026-95632: CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)
Published Oct 13, 2026
·Updated
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
Affected Software
1 affected component
CAI Content Credentials
Event History
Oct 13, 2026
CVE Published
via MITRE·09:27 PM
Data Sourced
via MITRE·09:27 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
No privileges or user interaction are required. The vector is network-based and the attack complexity is rated low.
2
What is the potential impact if exploitation succeeds?
An attacker could bypass security measures and obtain unauthorized write access. The stated impact is on integrity; no confidentiality or availability impact is identified.