{"id":"CVE-2026-123261","kind":"vulnerability","aliases":["CVE-2026-123261"],"related":[],"title":"CAI Content Credentials: signature check bypass grants unauthorized write access","description":"CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.","summary":"CAI Content Credentials fails to properly verify a cryptographic signature, which lets an attacker bypass a security feature. The sources say an attacker could then gain unauthorized write access, and exploitation depends on conditions outside the attacker's control.","severity":"medium","cvss":5.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["c2pa","content-credentials","other"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T22:18:29+00:00","first_seen_at":"2026-11-10T22:27:28+00:00","triaged_at":"2026-11-10T22:29:23+00:00","updated_at":"2026-11-10T22:29:23+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-11-10T22:29:23Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"CAI Content Credentials: signature check bypass grants unauthorized write access","impact":"medium","summary":"CAI Content Credentials fails to properly verify a cryptographic signature, which lets an attacker bypass a security feature. The sources say an attacker could then gain unauthorized write access, and exploitation depends on conditions outside the attacker's control.","audience":"businesses","category":"other","nicknames":[],"who_cares":["content-credentials","c2pa"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Attacker bypasses signature checks and gains unauthorized write access","analyst_note":"Identify the affected CAI Content Credentials component and version ranges from the NVD or vendor advisory, and whether the bypass is reachable over a network.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000648,"input_tokens":4571,"output_tokens":382,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-123261':13A,16A '-2026':12A,15A 'access':10A,49B,95C 'affect':64C 'attack':34B,43B,57B,82C,102C 'beyond':100C 'bypass':6A,35B,80C,88C 'c2pa':17B 'cai':1A,21B,60C 'check':5A 'condit':54B,99C 'content':2A,19B,22B,61C 'content-credenti':18B 'control':59B,104C 'could':44B,74C,83C 'credenti':3A,20B,23B,62C 'cryptograph':29B,70C 'cve':11A,14A 'depend':52B,97C 'exploit':51B,96C,105C 'fail':24B 'featur':38B,79C 'gain':46B,92C 'grant':7A 'improp':67C 'interact':113C 'issu':108C 'let':32B 'leverag':84C 'measur':90C 'outsid':55B 'proper':26B 'requir':111C 'result':75C 'say':41B 'secur':37B,78C,89C 'signatur':4A,30B,71C 'sourc':40B 'unauthor':8A,47B,93C 'user':112C 'verif':68C 'verifi':27B 'vulner':72C,86C 'write':9A,48B,94C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["c2pa","contentcredentials","medium","other"],"campaign_type":null,"search_a":"'-123261':13A,16A '-2026':12A,15A 'access':10A 'bypass':6A 'cai':1A 'check':5A 'content':2A 'credenti':3A 'cve':11A,14A 'grant':7A 'signatur':4A 'unauthor':8A 'write':9A","search_b":"'access':49B 'attack':34B,43B,57B 'bypass':35B 'c2pa':17B 'cai':21B 'condit':54B 'content':19B,22B 'content-credenti':18B 'control':59B 'could':44B 'credenti':20B,23B 'cryptograph':29B 'depend':52B 'exploit':51B 'fail':24B 'featur':38B 'gain':46B 'let':32B 'outsid':55B 'proper':26B 'say':41B 'secur':37B 'signatur':30B 'sourc':40B 'unauthor':47B 'verifi':27B 'write':48B","search_c":"'access':95C 'affect':64C 'attack':82C,102C 'beyond':100C 'bypass':80C,88C 'cai':60C 'condit':99C 'content':61C 'control':104C 'could':74C,83C 'credenti':62C 'cryptograph':70C 'depend':97C 'exploit':96C,105C 'featur':79C 'gain':92C 'improp':67C 'interact':113C 'issu':108C 'leverag':84C 'measur':90C 'requir':111C 'result':75C 'secur':78C,89C 'signatur':71C 'unauthor':93C 'user':112C 'verif':68C 'vulner':72C,86C 'write':94C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T22:18:29+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss_by":"psirt@adobe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-123261","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123261","severity":null,"published_at":"2026-11-10T22:18:29+00:00","modified_at":"2026-11-10T22:18:29+00:00","first_seen_at":"2026-11-10T22:27:28+00:00","fetched_at":"2026-11-10T22:27:28+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}