CVE-2026-18622: Foxit PDF Editor/Reader's signature-validation pop-up reports modified certified documents as valid
Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field duplication. This may mislead users into trusting tampered documents, since the UI cannot accurately reflect the actual integrity status of signatures.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-18622?
CVE-2026-18622 has a medium severity rating of 4.7.
How does CVE-2026-18622 affect Foxit PDF Editor/Reader?
CVE-2026-18622 affects Foxit PDF Editor/Reader by misleading users with inaccurate alerts regarding modified certified documents.
What risks does CVE-2026-18622 pose to users?
CVE-2026-18622 poses a risk of users trusting tampered documents due to inconsistent signature-validation alerts.
Is there a patch available for CVE-2026-18622?
As of now, there is no specific patch mentioned for CVE-2026-18622.
What should users do to mitigate the risks of CVE-2026-18622?
Users should carefully verify the integrity of documents from unknown sources to mitigate the risks of CVE-2026-18622.