CVE-2026-95633: CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)
Published Oct 13, 2026
·Updated
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
Affected Software
1 affected component
CAI Content Credentials
Event History
Oct 13, 2026
CVE Published
via MITRE·09:27 PM
Data Sourced
via MITRE·09:27 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require an authenticated account or user interaction?
No. The vulnerability is rated network-accessible with low attack complexity, requires no privileges, and does not require user interaction.
2
What security impact is indicated by the available assessment?
The reported impact is integrity-related: an attacker may bypass security measures and gain unauthorized write access. No confidentiality or availability impact is indicated in the supplied vector.