Description
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
Published: 2026-09-22
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: Application Denial of Service
Action: Apply Patch
AI Analysis

Impact

Adversaries can exploit an uncontrolled resource consumption flaw that allows them to exhaust system resources, causing the Adobe Content Credentials tool or SDK to become unresponsive. This flaw falls under CWE‑400 and can result in a denial‑of‑service condition for the entire application.

Affected Systems

The vulnerability affects the Adobe Content Credentials Command‑Line Tool and the Adobe Content Credentials Rust SDK. No specific affected versions are listed, so all current installations are potentially at risk until a patch is applied.

Risk and Exploitability

The CVSS score of 7.5 reflects a high impact, but the EPSS score is unavailable, and the flaw is not listed in CISA KEV, indicating it may not yet be widely exploited. The description states that exploitation does not require user interaction, suggesting that any entity that can invoke the affected tool or SDK—whether locally or via an API—could trigger the denial of service. Without an explicit remediation from Adobe, the risk remains significant for environments that rely on these components.

Generated by OpenCVE AI on September 22, 2026 at 20:42 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Acquire and deploy the latest patched release of the Adobe Content Credentials Command‑Line Tool that resolves the resource exhaustion bug.
  • Upgrade the Adobe Content Credentials Rust SDK to the newest available version containing the fix.
  • Configure operating‑system resource limits or application‑level throttling to cap memory or CPU usage of the Content Credentials processes, mitigating the impact of any future exploitation.

Generated by OpenCVE AI on September 22, 2026 at 20:42 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 23 Sep 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Tue, 22 Sep 2026 21:00:00 +0000

Type Values Removed Values Added
First Time appeared Adobe
Adobe content Credentials Command-line Tool
Adobe content Credentials Rust Sdk
Vendors & Products Adobe
Adobe content Credentials Command-line Tool
Adobe content Credentials Rust Sdk

Tue, 22 Sep 2026 19:00:00 +0000

Type Values Removed Values Added
Description CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
Title CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)
Weaknesses CWE-400
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}


Subscriptions

Adobe Content Credentials Command-line Tool Content Credentials Rust Sdk
cve-icon MITRE

Status: PUBLISHED

Assigner: adobe

Published:

Updated: 2026-09-23T14:37:14.734Z

Reserved: 2026-08-18T01:29:54.613Z

Link: CVE-2026-75632

cve-icon Vulnrichment

Updated: 2026-09-23T14:15:15.498Z

cve-icon NVD

Status : Undergoing Analysis

Published: 2026-09-22T19:16:44.720

Modified: 2026-09-23T15:17:18.550

Link: CVE-2026-75632

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-22T20:45:16Z

Weaknesses
  • CWE-400

    Uncontrolled Resource Consumption