CVE-2026-91814: Security vulnerability: Foxit PDF Editor/Reader Fails to Detect Modifications to Signed Documents Displaying Newly Added Content

Medium severity · published Sep 23, 2026

CVE-2026-91814

Security vulnerability: Foxit PDF Editor/Reader Fails to Detect Modifications to Signed Documents Displaying Newly Added Content

5.5

CVSS

0.2%

EPSS

On KEV

Description

A signature validation vulnerability exists in Foxit PDF Editor/Reader’s handling of incrementally updated PDF documents. Changes to visible document content may not invalidate the existing signature, allowing attackers to alter signed content and potentially carry out content spoofing while the document continues to appear validly signed.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Attack vector

Local

Complexity

Low

Privileges

None

User interaction

Required

Confidentiality

None

Integrity

High

Availability

None

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.2% · higher than 7% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Foxit PDF Editor · Foxit Software Inc.

Versions 2026.2 and earlier; Versions 14.0.7 and earlier; Versions 13.2.6 and earlier · source: vendor

Foxit PDF Reader · Foxit Software Inc.

Versions 2026.2 and earlier · source: vendor

Pdf Editor · Foxit

through 13.2.5.63482; 14.0.0.33046 through 14.0.7.33751; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.2.0.39747; +6 more · source: NVD

Pdf Reader · Foxit

through 2026.2.0.39747; through 2026.2.1.39815 · source: NVD

Affected product

Foxit PDF Editor

Foxit Software Inc.

All Foxit PDF Editor CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-91814

CVE.org

https://www.cve.org/CVERecord?id=CVE-2026-91814

www.foxit.com

https://www.foxit.com/support/security-bulletins.html