Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 8 products
CVE-2026-48353 Improper Input Validation in CAI Content Credentials Leads to Arbitrary File System Read https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-48353
Post summary
The text announces CVE-2026-48353, describing an arbitrary file system read vulnerability due to improper input validation in CAI Content Credentials, with no mention of PoC, exploit tools, or active exploitation.
8 of 8 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | adobe | c2pa | - | rust | - |
| App | adobe | c2pa-web | - | node.js | - |
| App | adobe | c2patool | - | - | - |
| OS | apple | iphone_os | - | - | - |
| OS | apple | macos | - | - | - |
| OS | android | - | - | - | |
| OS | linux | linux_kernel | - | - | - |
| OS | microsoft | windows | - | - | - |