CVE-2026-48436: medium-severity vulnerability in Adobe Content Credentials Command-Line Tool
CAI Content Credentials | Improper Input Validation (CWE-20)
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.5epss 0.7%
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Affected products
Adobe · Content Credentials Command-Line ToolAdobe · Content Credentials JS SDKAdobe · Content Credentials Rust SDKRelated CVEs — Adobe Content Credentials Command-Line Tool
In the same product, most dangerous first.
CVE-2026-118484MEDIUMCAI Content Credentials | Improper Input Validation (CWE-20)EPSS 1.1%CVE-2026-122097MEDIUMCAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)EPSS 1.0%CVE-2026-71443HIGHCAI Content Credentials | Improper Input Validation (CWE-20)EPSS 0.9%CVE-2026-48351HIGHCAI Content Credentials | Improper Input Validation (CWE-20)EPSS 0.9%CVE-2026-48352HIGHCAI Content Credentials | Improper Input Validation (CWE-20)EPSS 0.9%CVE-2026-75632HIGHCAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)EPSS 0.9%