PT-2026-58830 · Adobe · Content Credentials Command-Line Tool+6

Publicado 2026-07-14 · Atualizado 2026-07-14 · CVE-2026-48287

NVD

CVSS v3.1

7.4

Alta

Vetor base

AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N

CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

Correção

Untrusted Search Path

Enumeração de Fraquezas

CWE-426

Identificadores relacionados

CVE-2026-48287

Produtos afetados

Content Credentials Command-Line Tool

Content Credentials Js Sdk

Content Credentials Rust Sdk

C2Pa-Js

C2Pa-Rs

C2Patool

Contentauthenticity.Org

Referências · 2

• https://helpx.adobe.com/security/products/content-authenticity-sdk/apsb26-80.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-48287 · Nota de Segurança