CVE-2026-100116: Improper Certificate Validation (CWE-295) in Adobe Content Credentials Rust SDK

The vulnerability identified as CVE-2026-100116 affects Adobe's Content Credentials Rust SDK and involves improper certificate validation (CWE-295). This security weakness could allow an attacker to bypass security mechanisms, resulting in unauthorized write access. The exploitability does not require user interaction but depends on external conditions beyond the attacker's control. No known exploits are reported in the wild. The CVSS v3.1 base score is 5.9, reflecting a medium severity impact primarily on integrity.

An attacker exploiting this vulnerability could bypass security controls and gain unauthorized write access to the affected system or data. There is no impact on confidentiality or availability reported. The exploit does not require user interaction but depends on conditions beyond the attacker's control. No active exploitation has been observed.

No patch or official fix information is currently available for this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, monitor Adobe's advisories for updates and consider limiting exposure of the affected SDK where possible.