CVE-2026-91796 — Foxit PDF Editor/Reader importIcon NTLM Response Information Disclosure Vulnerability

CVE-2026-91796

Foxit PDF Editor/Reader importIcon NTLM Response Information Disclosure Vulnerability PUBLISHED

Description (CNA)

The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials.

Affected (CNA)

Vendor / product	Versions
Foxit Software Inc. / Foxit PDF Editor	affected Versions 2026.2 and earlier; affected Versions 14.0.7 and earlier; affected Versions 13.2.6 and earlier
Foxit Software Inc. / Foxit PDF Reader	affected Versions 2026.2 and earlier

CWE

CWE-693

References

https://www.foxit.com/support/security-bulletins.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.