CVE-2026-91812 HIGH

CVE-2026-91812: Foxit PDF Editor/Reader FoxitUpdater Improper Certificate Validation Local Privilege Escalation Vulnerability

Vendor Foxit Software Inc.
Product Foxit PDF Editor
Weakness CWE-295
Published September 23, 2026
Last update September 23, 2026
View on NVD All CVEs

CVSS base score

7.9/10
Attack vector Adjacent
Attack complexity High
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows man-in-the-middle attackers to bypass certificate validation and package integrity checks, potentially enabling arbitrary code execution with system privileges.

Key dates

02Disclosure timeline

September 23, 2026 CVE published