CVE-2026-48295
CAI Content Credentials | Insufficiently Protected Credentials (CWE-522)
- State
- Published
- Severity
- 7.5 High
- Published
- Jul 14, 2026
- Updated
- Aug 27, 2026
- Reserved
- May 21, 2026
Description
CAI Content Credentials is affected by an Insufficiently Protected Credentials vulnerability that could result in disclosure of sensitive information. An attacker could leverage this vulnerability to gain unauthorized read access. Exploitation of this issue does not require user interaction.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | adobe |
Weaknesses
- CWE-522 Insufficiently Protected Credentials (CWE-522)
Affected Products
| Product | Versions |
|---|---|
Content Credentials Rust SDKAdobe |
|
Content Credentials Command-Line ToolAdobe |
|
Content Credentials JS SDKAdobe |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.