CVE-2026-76194
MediumCVSS 4.3Exploitation Probability (EPSS)
Elevated risk62th percentile - higher than 62% of all known CVEs
Summary
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.
Risk Assessment
A user visiting a malicious page could unknowingly allow an attacker to bypass security measures and gain limited write access. The risk applies to environments using CAI Content Credentials for content provenance verification.
Recommendation
Update CAI Content Credentials to the latest patched version and instruct users to avoid suspicious websites.
Other vulnerabilities in CAI Content Credentials
See all- CVE-2026-89277Medium
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this to crash the application, leading to a denial-of-service condition. Exploitation requires user interaction, as the victim must visit a maliciously crafted URL or interact with a compromised web page.
- CVE-2026-75638Medium
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.
- CVE-2026-75634Medium
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.
- CVE-2026-75633Medium
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.
- CVE-2026-75632High
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exhaust system resources, causing an application denial-of-service condition, and exploitation does not require user interaction.
- CVE-2026-19480High
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could bypass security measures and gain unauthorized write access, and exploitation does not require user interaction.
- CVE-2026-76198Medium
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
- CVE-2026-76189Medium
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
- CVE-2026-71444Medium
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
- CVE-2026-71443High
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation does not require user interaction.
Original NVD description (English source)
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

