A signature validation vulnerability exists in Foxit PDF Editor/Reader’s handling of incrementally updated PDF documents. Changes to visible document content may not invalidate the existing signature, allowing attackers to alter signed content and potentially carry out content spoofing while the document continues to appear validly signed.
CVE-2026-91814
CVSS base score
5.3 (v3.1)
Severity
MEDIUM
Attack vector
Network
Weakness
CWE-347
Last modified
October 29, 2026
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
Affected products
foxit pdf editor
foxit pdf reader
References
- www.foxit.com Vendor Advisory