CVE-2026-18622 — Foxit PDF Editor/Reader's signature-validation pop-up reports modified certified documents as valid

CVE-2026-18622

Foxit PDF Editor/Reader's signature-validation pop-up reports modified certified documents as valid PUBLISHED

Description (CNA)

Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field duplication. This may mislead users into trusting tampered documents, since the UI cannot accurately reflect the actual integrity status of signatures.

Affected (CNA)

Vendor / product	Versions
Foxit Software Inc. / Foxit PDF Editor	affected Versions 2026.1.2 and earlier; affected Versions 14.0.5 and earlier; affected Versions 13.2.5 and earlier
Foxit Software Inc. / Foxit PDF Reader	affected Versions 2026.1.2 and earlier

CWE

CWE-451

References

https://www.foxit.com/support/security-bulletins.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.