CVE-2026-91812: Foxit PDF Editor/Reader FoxitUpdater Improper Certificate Validation Local Privilege Escalation Vulnerability

Q: What access and conditions does an attacker need to exploit this?

An attacker needs to be in a man-in-the-middle position for the update traffic. Exploitation also requires user interaction, and the attack complexity is rated high; no prior privileges are required.

Q: What is the likely impact if exploitation succeeds?

The attacker may bypass certificate validation and package integrity checks in the update mechanism, enabling arbitrary code execution with system privileges. The reported impact includes high confidentiality, integrity, and availability effects, with scope changed.

Published Sep 23, 2026

Updated

A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows man-in-the-middle attackers to bypass certificate validation and package integrity checks, potentially enabling arbitrary code execution with system privileges.

Affected Software

9 affected components

Foxit Foxit PDF Editor/Reader

All of the following

Any of the following

Foxit PDF Editor<=13.2.5.63482

Foxit PDF Editor>=14.0.0.33046<=14.0.7.33751

Foxit PDF Editor>=2023.1.0.15510<=2023.3.0.23028

Foxit PDF Editor>=2024.1.0.23997<=2024.4.1.27687

Foxit PDF Editor>=2025.1.0.27937<=2025.3.0.35737

Foxit PDF Editor>=2026.1.0.36452<=2026.2.0.39747

Foxit PDF Reader<=2026.2.0.39747

Microsoft Windows

Event History

Sep 23, 2026

CVE Published

via MITRE·07:49 AM

Data Sourced

via MITRE·07:49 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:17 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What access and conditions does an attacker need to exploit this?

An attacker needs to be in a man-in-the-middle position for the update traffic. Exploitation also requires user interaction, and the attack complexity is rated high; no prior privileges are required.

What is the likely impact if exploitation succeeds?