Tracker / CVE-2026-91797
CVE-2026-91797
High 7.8
Foxit PDF Editor/Reader failed to validate the directory traversal path in the attachment file name, resulting in malicious attachments being able to be written to directories outside the expected secure area when the PDF is opened.
Affected products and versions
| foxit | pdf_editor · … → 13.2.5.63482 |
|---|---|
| foxit | pdf_editor · 14.0.0.33046 → 14.0.7.33751 |
| foxit | pdf_editor · 2023.1.0.15510 → 2023.3.0.23028 |
| foxit | pdf_editor · 2024.1.0.23997 → 2024.4.1.27687 |
| foxit | pdf_editor · 2025.1.0.27937 → 2025.3.0.35737 |
| foxit | pdf_editor · 2026.1.0.36452 → 2026.2.0.39747 |
| foxit | pdf_reader · … → 2026.2.0.39747 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.