rootpwn

medium · CVSS v3 5.3 · EPSS 0.00172

CVE-2026-91814

Foxit PDF Editor/Reader fails to invalidate signatures when documents are incrementally updated, allowing content changes to go unnoticed. T

Overview

Foxit PDF Editor/Reader fails to invalidate signatures when documents are incrementally updated, allowing content changes to go unnoticed. The flaw can lead to spoofed documents that still appear signed. It matters because many organizations rely on PDF signatures for legal and compliance purposes.

Description

A signature validation vulnerability exists in Foxit PDF Editor/Reader’s handling of incrementally updated PDF documents. Changes to visible document content may not invalidate the existing signature, allowing attackers to alter signed content and potentially carry out content spoofing while the document continues to appear validly signed.

Impact

Confidentiality: attackers can modify signed documents, undermining trust. Integrity: signatures may no longer reflect true content. Availability: no direct impact. Defenders must treat altered PDFs as untrusted and verify signatures against original content.

Remediation

Apply the latest Foxit security patch or upgrade to the newest version. Disable incremental PDF updates if possible. Use external PDF validation tools that check signature against full document hash. Monitor for anomalous PDFs and enforce strict signature verification policies.

Risk context

The CVSS score of 5.3 indicates medium risk, and the EPSS of 0.00172 suggests low likelihood of exploitation. Nonetheless, the potential for legal and compliance breaches warrants prompt patching.

Affected products

  • Foxit PDF Editor
  • Foxit PDF Reader

Scores

Severity
medium
CVSS v2
5.4
CVSS v3
5.3
CVSS v4
—
EPSS
0.00172

PDF signature Foxit content-spoofing document-validation

← All CVEs

Related CVEs

medium

CVE-2026-88929

The Product Badge, Label, Countdown Timer for WooCommerce WordPress plugin before 7.5.2 does not check whether a product is published before returning its details to unauthenticated users, allowing them to read the title, description and price of draft, pending and private products.

View analysis

medium

CVE-2026-88974

WPGraphQL provides a GraphQL API for WordPress sites. Prior to 2.22.2, the updatePost mutation in src/Mutation/PostObjectUpdate.php checks only the collection-level edit_posts capability and the post author, but does not enforce the object-level edit_post capability or require publish_posts for public status transitions. An authenticated Contributor can therefore publish the Contributor's own draft without editorial approval or modify the Contributor's previously published post despite lacking edit_published_posts, while posts owned by other authors remain protected. This issue is fixed in version 2.22.2.

View analysis

medium

CVE-2026-89331

The FluentBoards WordPress plugin (pre‑2.1.0) fails to restrict member data exposed by its public, token‑shared board feature, enabling unauthenticated users to retrieve the email addresses of board members, often including administrators. This flaw allows attackers to harvest sensitive contact information without authentication. The vulnerability is a medium‑severity confidentiality breach.

View analysis

medium

CVE-2026-90985

The WPC Smart Compare for WooCommerce WordPress plugin before 6.6.1 does not apply WordPress's post-password protection when returning product content through its comparison handler, allowing unauthenticated users to read the description of password-protected products.

View analysis