CVE-2026-48378(adobe / c2pa)

LOWCVSS 5.3 · MEDIUM

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user interaction.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-20

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • c2pa
  • c2pa-web
  • c2patool

Affected systems

Vendors
Products
c2pac2pa-webc2patool

Deep dive

Full discourse1 post
  • しーにゃ♪@公式@Syynya

    Security update available for Adobe ColdFusion | APSB26-144 https://www.adobe.com/trust/security/products/coldfusion/apsb26-144.html 10/21付で記述が更新されている。 『October 21, 2026: Removed CVE-2026-48378.』 デモトップページは相変わらず「Last Updated: October 13, 2026」って表記なまま。 Fxxkin’ Adobe.

    0000033
    917 followersView on X
CPE platform detail3 entries

3 of 3 entries

PartVendorProductVersionTarget SWTarget HW
Appadobec2pa-rust-
Appadobec2pa-web-node.js-
Appadobec2patool---

Explore more