Medium severity6.1NVD Advisory· Published Sep 23, 2026· Updated Oct 8, 2026

CVE-2026-91796

Description

The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Foxitsoftware/PDF Editor/Readerllm-create
Foxitsoftware/PDF Editor
cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*
Range: <=13.2.5.63482
Foxitsoftware/PDF Reader
cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*
Range: <=2026.2.0.39747

Patches

Vulnerability mechanics

References

www.foxit.com/support/security-bulletins.htmlnvdVendor Advisory

News mentions

Foxit PDF Editor/Reader: 23 Vulnerabilities Disclosed in Single Batch, Affecting Multiple Components
Vypr Intelligence · Sep 23, 2026
ZDI-26-732: Foxit PDF Reader importIcon NTLM Response Information Disclosure Vulnerability
Zero Day Initiative · Sep 23, 2026

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000