OCTOBER 16, 2026
Live Feed
Back to database
Case File

CVE-2026-103820

MEDIUM · CVSS 5.5 EPSS 0.22% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-10-13 · Last synced 2026-10-16

CyberRota Analysis

AI-Generated

The vulnerability affects CAI Content Credential, allowing attackers to exploit a path traversal flaw that can lead to arbitrary file system writes outside intended directory restrictions. Successful exploitation requires user interaction, as it necessitates the victim to extract a specially crafted file. Organizations using this product should prioritize addressing this vulnerability to prevent potential unauthorized access to sensitive files or directories.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-103820
Severity
MEDIUM
CVSS
5.5
EPSS
0.22%

Original NVD Description

CAI Content Credential is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in an arbitrary file system write. An attacker could leverage this vulnerability to write to unauthorized files or directories outside of intended restrictions. Exploitation of this issue requires user interaction in that a victim must extract a maliciously crafted file.

Related CVEs

Other vulnerabilities affecting the same vendor(s)