Document Management Software Vulnerability Affecting Foxit Products
CVE-2026-3774

4.7MEDIUM

Key Information:

Vendor

Foxit Inc.

Status
Foxit PDF Editor
Vendor
CVE Published:
1 April 2026

What is CVE-2026-3774?

A vulnerability in Foxit PDF Editor and Foxit Reader allows JavaScript and document actions to modify form fields and content immediately before or after critical functions like redaction and encryption. Due to incomplete coverage by the redaction and encryption mechanisms, this can lead to unintended exposure of sensitive information or inconsistencies between displayed and printed outputs, potentially compromising user data security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Foxit PDF Editor Windows Versions 2025.3 and earlier

References

https://www.foxit.com/support/security-bulletins.html

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.