CVE-2026-48353: CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to acc
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Details
Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-48353
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-483530.15% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 5% of all scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-48353 | coverage & exploitation status | NVD · CVE.org |
Recent advisories for CAI Content Credentials
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- mediumCVE-2026-48357: CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that…nvd · 2026-07-14
- mediumCVE-2026-48354: CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that co…nvd · 2026-07-14
- highCVE-2026-48352: CAI Content Credentials is affected by an Improper Input Validation vulnerability that could r…nvd · 2026-07-14
- highCVE-2026-48351: CAI Content Credentials is affected by an Improper Input Validation vulnerability that could r…nvd · 2026-07-14
- mediumCVE-2026-48312: CAI Content Credentials is affected by an Improper Input Validation vulnerability that could r…nvd · 2026-07-14
- mediumCVE-2026-48302: CAI Content Credentials is affected by an Improper Input Validation vulnerability that could r…nvd · 2026-07-14
More from NVD Recent CVEs
- unknownCVE-2026-55735: Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticat…2026-08-01
- unknownCVE-2026-55734: Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guar…2026-08-01
- unknownCVE-2026-55733: Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of se…2026-08-01
- unknownCVE-2026-54894: Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of se…2026-08-01
- mediumCVE-2026-67355: guzzlehttp/guzzle versions before 7.15.1 fail to preserve host-only cookie scope, storing the …2026-08-01