CVE-2026-48436
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk50th percentile - higher than 50% of all known CVEs
Summary
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a security feature bypass. An attacker could leverage this to bypass security measures and gain unauthorized write access. Exploitation requires user interaction, such as visiting a malicious URL or interacting with a compromised web page.
Risk Assessment
The risk is potential unauthorized modification of data or system, which could compromise integrity and trust in the application.
Recommendation
Strengthen input validation, apply patches, and educate users on safe browsing.
Original NVD description (English source)
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.