CVE-2026-100118: Improper Certificate Validation (CWE-295) in Adobe Content Credentials Rust SDK

The vulnerability identified as CVE-2026-100118 affects Adobe's Content Credentials Rust SDK. It involves improper validation of certificates (CWE-295), which can be exploited by an attacker to bypass security controls and gain unauthorized write access. The exploit requires no user interaction and has a CVSS 3.1 base score of 7.5, indicating a high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vulnerability impacts the integrity of the system but does not affect confidentiality or availability.

Successful exploitation allows an attacker to bypass security features and gain unauthorized write access, potentially leading to integrity violations. There is no impact on confidentiality or availability according to the CVSS vector. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Users should monitor Adobe's advisories for updates and apply any forthcoming patches promptly.