Skip to content
AdobeCVE-2026-75634

Adobe Content Credentials: improper input validation

Medium4.3CVE-2026-75634 · Published Sep 22, 2026

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.

Adobe advisory

Affected versions

PackageAffectedFixed in
Content Credentials Command-Line Tool
Product
<= c2patool-v0.26.70No fix yet
Content Credentials Rust SDK
Product
<= c2pa-v0.89.2No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-20

More Adobe advisories

All Adobe
Advisory
Adobe Content Credentials: integer overflow
Medium5.5Sep 22
Adobe Substance3D - Modeler: out-of-bounds write
High7.8Sep 22
Adobe Connect: improper certificate validation
Medium6.2Sep 22
Adobe Premiere: server-side request forgery
High7.1Sep 22
Adobe InDesign Desktop: null pointer dereference
Medium5.5Sep 22
Adobe Substance3D - Modeler: out-of-bounds write
High7.8Sep 22

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.