Dashboard / CVE-2026-123260

CVE-2026-123260

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 43/100
Published: 2026-11-10 Modified: 2026-11-13 First seen: 2026-11-10 Status: active

Attack Surface

Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: None
S: Unchanged
C: None
I: Low
A: None

Description

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user interaction.

Weakness Classification (1)

Affected Software (4)

VendorProductVersion
Adobe C2PA Tool 0
Adobe C2PA Tool 0
Adobe Content Credentials Rust SDK 0
Adobe Content Credentials Rust SDK 0

References & Advisories (1)

Change History

FieldOld ValueNew ValueDetected
cvss_base 4.0 4 2026-11-13T16:30

Bug Bounty Relevance

43 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

4.0 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS — Exploitation Probability

0.29%
Raw Score 0.002870
Percentile 21.5%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00287
2026-11-12
0.00287

Intelligence Sources

mitre ref →
nvd ref →

External Links