CVE-2026-91796CWE-693

CVE-2026-91796

Medium · published September 23, 2026

CVSS v3.1
6.1
EPSS
0%
Percentile
1.8
In the wild
Unconfirmed
What it is

The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00121 · 1.8th percentile
Weakness
CWE-693 · Protection Mechanism Failure
Published
2026-09-23T12:17Z
Affected products (7)
ProductVersionsFixed in
foxit/pdf_editor≤ 13.2.5.63482—
foxit/pdf_editor≥ 14.0.0.33046, ≤ 14.0.7.33751—
foxit/pdf_editor≥ 2023.1.0.15510, ≤ 2023.3.0.23028—
foxit/pdf_editor≥ 2024.1.0.23997, ≤ 2024.4.1.27687—
foxit/pdf_editor≥ 2025.1.0.27937, ≤ 2025.3.0.35737—
foxit/pdf_editor≥ 2026.1.0.36452, ≤ 2026.2.0.39747—
foxit/pdf_reader≤ 2026.2.0.39747—
References (1)
https://www.foxit.com/support/security-bulletins.html · 14984358-7092-470d-8f34-ade47a7658a2
EPSS history
Timeline
  • 24 SEP 03:25Z
    EPSS moved — → 0%
    epss
  • 23 SEP 07:51Z
    Foxit PDF Editor/Reader importIcon NTLM Response Information Disclosure Vulnerability
    cvelistv5