VulnSocial

CVE-2026-48287Disclosure(adobe / android)

LOWCVSS 7.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch adobe android systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

adobe CVEsBack to dashboard
1.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-426

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • android
  • c2pa
  • c2pa-web
  • c2patool

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-07-15); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
adobeapplegooglelinuxmicrosoft
Products
androidc2pac2pa-webc2patooliphone_oslinux_kernelmacoswindows

1 version affected across 8 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-07-15: 1Mentions · 2026-07-16: 1Patch / Workaround · 2026-07-16: 1Technical Details · 2026-07-15: 1Technical Details · 2026-07-16: 107-1507-16
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-07-151
Disclosure1
2026-07-161
Patch1
Full discourse2 posts
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH SEVERITY: CVE-2026-48287 CVSS 7.4 - CAI Content Credentials vulnerable to Untrusted Search Path flaw enabling arbitrary code execution. Requires user interaction with malicious URL/page. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/nL4exZTZtW

    Post summary

    The tweet announces a high‑severity CVE with technical details and urges immediate patching, but does not mention active exploitation or a proof of concept.

    0000039
    79 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-48287 Untrusted Search Path Vulnerability in CAI Content Credentials Enabling ... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-48287 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3

    Post summary

    The tweet announces CVE‑2026‑48287, labeling it as an untrusted search path flaw in CAI Content Credentials, and points to Vulmon for more details, but does not provide PoCs, exploits, or patch information.

    0000082
    4.1K followersView on X
CPE platform detail8 entries

8 of 8 entries

PartVendorProductVersionTarget SWTarget HW
Appadobec2pa-rust-
Appadobec2pa-web-node.js-
Appadobec2patool---
OSappleiphone_os---
OSapplemacos---
OSgoogleandroid---
OSlinuxlinux_kernel---
OSmicrosoftwindows---

Explore more

Back to dashboardadobe CVEsapple CVEsgoogle CVEsandroid vulnerabilities