Vulnerability in Foxit PDF Editor/Reader's Update Mechanism
CVE-2026-91812

7.9HIGH

Key Information:

Vendor

Foxit Inc.

Status
Foxit PDF Editor
Foxit
Vendor
CVE Published:
23 September 2026

What is CVE-2026-91812?

A vulnerability in the update mechanism of Foxit PDF Editor/Reader exposes users to man-in-the-middle attacks, allowing malicious actors to circumvent certificate validation and package integrity checks. This flaw may lead to arbitrary code execution with elevated system privileges, jeopardizing the security of sensitive information and system integrity.

Affected Version(s)

Foxit PDF Editor Windows Versions 2026.2 and earlier

Foxit PDF Editor Windows Versions 14.0.7 and earlier

Foxit PDF Editor Windows Versions 13.2.6 and earlier

References

https://www.foxit.com/support/security-bulletins.html

CVSS V3.1

Score:
7.9
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

praydog & kmx00 working with TrendAI Zero Day Initiative
.