CVE-2026-103294

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.

• CWE-295

• https://www.adobe.com/trust/security/products/content-credentials-sdk/apsb26-163.htmlVendor Advisory

Published

Oct 13, 2026

Last Modified

Oct 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-103288Ghost, an open-source publishing platform, contains an input…6.5
• CVE-2026-103289Ghost from 5.9.0 before 6.44.1 contains an input validation …6.5
• CVE-2026-103290Ghost versions 6.14.0 through versions prior to 6.27.0 conta…3.8
• CVE-2026-103291Ghost versions from 3.20.2 before 6.51.0 contain a server-si…6.4
• CVE-2026-103292Ghost versions from 0.5.3 through versions prior to 6.50.0 f…8
• CVE-2026-103293The MPG WordPress plugin before 4.2.3 does not validate tha…6.8
• CVE-2026-103296CAI Content Credentials is affected by an Improper Verificat…7.5
• CVE-2026-103297CAI Content Credentials is affected by an Improper Verificat…7.5
• CVE-2026-103304The eaSYNC Booking WordPress plugin before 1.3.31 does not …5.3
• CVE-2026-103305The Prenotazioni WordPress plugin through 1.7.5 does not hav…8.8
• CVE-2026-103307The Walletdoc Payment Gateway for WooCommerce WordPress plug…8.6
• CVE-2026-103308The Visma Pay for WooCommerce WordPress plugin before 1.2.2 …6.5