CVE-2026-95632: Improper Verification of Cryptographic Signature (CWE-347) in Adobe Content Credentials Rust SDK

The vulnerability identified as CVE-2026-95632 affects Adobe Content Credentials Rust SDK version 0. It is caused by improper verification of cryptographic signatures (CWE-347), which can be exploited by an attacker to bypass security controls and obtain unauthorized write access. The CVSS 3.1 base score is 7.5 (high), with an attack vector of network, low attack complexity, no privileges required, no user interaction, and impact limited to integrity compromise without confidentiality or availability impact. There is no vendor advisory or patch information available at this time.

Successful exploitation allows an attacker to bypass security features and gain unauthorized write access to the affected system or data. This compromises the integrity of the system but does not affect confidentiality or availability. No user interaction is required for exploitation, increasing the risk of remote attacks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected software and monitor for suspicious activity related to unauthorized write operations.