CVE-2026-100122: Improper Certificate Validation (CWE-295) in Adobe Content Credentials Rust SDK

The Adobe Content Credentials Rust SDK contains an improper certificate validation vulnerability (CWE-295) that could be exploited by an attacker to bypass security controls. This bypass could lead to unauthorized write access within the affected component. The vulnerability does not require any user interaction to be exploited and has a CVSS 3.1 base score of 7.5, indicating a high impact on integrity but no impact on confidentiality or availability. The affected version is specifically version 0. No known exploits are reported in the wild, and no vendor advisory or patch information is available at this time.

Successful exploitation of this vulnerability allows an attacker to bypass security features and gain unauthorized write access, potentially compromising the integrity of the system or data managed by the Adobe Content Credentials Rust SDK. There is no impact on confidentiality or availability according to the CVSS vector. No user interaction is required for exploitation, increasing the risk of automated or remote attacks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Adobe's security advisories for updates. Until a fix is available, consider restricting access to the affected SDK or implementing additional certificate validation checks externally if feasible.