CVE-2026-48295: CAI Content Credentials | Insufficiently Protected Credentials (CWE-522)
Published Jul 14, 2026
·Updated
CAI Content Credentials is affected by an Insufficiently Protected Credentials vulnerability that could result in disclosure of sensitive information. An attacker could leverage this vulnerability to gain unauthorized read access. Exploitation of this issue does not require user interaction.
Affected Software
9 affected components
CAI Content Credentials
All of the following
Any of the following
Adobe C2pa Rust<=0.84.0
Adobe C2pa-web Node.js<=0.7.0
Adobe C2patool<=0.17.0
Any of the following
Apple iPhone OS
Apple macOS
Google Android
Linux Linux kernel
Microsoft Windows
Event History
Jul 14, 2026
CVE Published
via MITRE·09:33 PM
Data Sourced
via MITRE·09:33 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-48295?
CVE-2026-48295 has a high severity rating of 7.5.
2
What is the impact of CVE-2026-48295?
CVE-2026-48295 can lead to unauthorized read access to sensitive information.
3
How does CVE-2026-48295 allow for exploitation?
Exploitation of CVE-2026-48295 does not require any user interaction, making it easier for attackers.
4
What type of vulnerability is CVE-2026-48295 classified as?
CVE-2026-48295 is classified as an Insufficiently Protected Credentials vulnerability.
5
Which software is affected by CVE-2026-48295?
CVE-2026-48295 affects CAI Content Credentials.