Medium severity4.7NVD Advisory· Published Sep 23, 2026· Updated Oct 29, 2026
CVE-2026-91788
CVE-2026-91788
Description
When implementing the JavaScript interface, Foxit PDF Editor/Reader did not perform the attribute authorization checks required by the specification. As a result, a trusted malicious PDF could potentially access sensitive content from other documents within the same process and transmit it externally.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
1- www.foxit.com/support/security-bulletins.htmlnvdVendor Advisory
News mentions
2- Foxit PDF Editor/Reader: 23 Vulnerabilities Disclosed in Single Batch, Affecting Multiple ComponentsVypr Intelligence · Sep 23, 2026
- ZDI-26-720: Foxit PDF Reader activeDocs Missing Authorization Information Disclosure VulnerabilityZero Day Initiative · Sep 23, 2026