PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-47905 Adobe CVE debrief

CVE-2026-47905 is an Uncontrolled Resource Consumption vulnerability affecting CAI Content Credentials versions [email protected], c2pa-v0.80.1, and earlier. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. This issue does not require user interaction to be exploited. The vulnerability has a CVSS score of 6.2 and a severity rating of MEDIUM.

Vendor
Adobe
Product
CAI Content Credentials
CVSS
MEDIUM 6.2
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-09
Original CVE updated
2026-08-28
Advisory published
2026-06-09
Advisory updated
2026-08-28

Who should care

Users of CAI Content Credentials versions [email protected], c2pa-v0.80.1, and earlier should apply patches or mitigations to prevent exploitation of this vulnerability.

Technical summary

The vulnerability is caused by an Uncontrolled Resource Consumption issue in CAI Content Credentials. This could allow an attacker to consume excessive system resources, leading to a denial-of-service condition for the application.

Defensive priority

MEDIUM

Recommended defensive actions

  • Apply patches or updates provided by the vendor to affected versions of CAI Content Credentials.
  • Restrict access to vulnerable systems or services to minimize potential exposure.
  • Monitor system resources and application performance for signs of exploitation.

Evidence notes

The CVE was published on 2026-06-09T22:16:25.517Z and last modified on 2026-06-10T18:35:49.083Z. The vendor is identified as Unknown Vendor, with a possible link to Adobe.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-47905 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-47905

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-47905 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-47905

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.