CVE-2026-102502: Improper Verification of Cryptographic Signature (CWE-347) in Adobe Content Credentials Rust SDK

The vulnerability identified as CVE-2026-102502 affects Adobe's Content Credentials Rust SDK. It is caused by improper verification of cryptographic signatures (CWE-347), which can lead to a security feature bypass. Exploitation of this vulnerability does not require any user interaction and could allow an attacker to gain unauthorized limited write access to the affected system or component. The CVSS 3.1 base score is 5.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to integrity.

An attacker exploiting this vulnerability could bypass security measures and gain unauthorized limited write access, potentially modifying content or credentials managed by the SDK. There is no impact on confidentiality or availability. No known exploits are reported in the wild.

No patch or official fix information is currently available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, monitor Adobe's advisories for updates and consider restricting access to the affected SDK where possible.