CVE-2026-100120: Improper Input Validation (CWE-20) in Adobe Content Credentials Rust SDK

The Adobe Content Credentials Rust SDK suffers from an improper input validation vulnerability (CWE-20) that enables attackers to bypass security controls and gain unauthorized write access. Exploitation does not require user interaction, increasing the risk of remote attacks. The vulnerability is identified as CVE-2026-100120 with a CVSS 3.1 base score of 7.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. No official patch or fix has been disclosed at this time.

An attacker exploiting this vulnerability could bypass security mechanisms in the Adobe Content Credentials Rust SDK and gain unauthorized write access, potentially compromising the integrity of the system or data. There is no confidentiality or availability impact reported. Exploitation does not require user interaction, which increases the risk of remote exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor Adobe's advisories for updates and consider restricting access to the affected SDK where possible.