CVE-2026-91814 — Security vulnerability: Foxit PDF Editor/Reader Fails to Detect Modifications to Signed Documents Displaying Newly Ad…

CVE-2026-91814

Security vulnerability: Foxit PDF Editor/Reader Fails to Detect Modifications to Signed Documents Displaying Newly Added Content PUBLISHED

Description (CNA)

A signature validation vulnerability exists in Foxit PDF Editor/Reader’s handling of incrementally updated PDF documents. Changes to visible document content may not invalidate the existing signature, allowing attackers to alter signed content and potentially carry out content spoofing while the document continues to appear validly signed.

Affected (CNA)

Vendor / product	Versions
Foxit Software Inc. / Foxit PDF Editor	affected Versions 2026.2 and earlier; affected Versions 14.0.7 and earlier; affected Versions 13.2.6 and earlier
Foxit Software Inc. / Foxit PDF Reader	affected Versions 2026.2 and earlier

CWE

CWE-347

References

https://www.foxit.com/support/security-bulletins.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.