VYPR
← All advisories
High severity8.8NVD Advisory· Published Sep 23, 2026· Updated Oct 29, 2026

CVE-2026-91798

CVE-2026-91798

Description

A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the configuration file to be modified by regular users, which may lead to arbitrary script execution with higher privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Foxitsoftware/PDF Editor2 versions
    cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*range: <=13.2.6.24111
    • (no CPE)
  • Foxitsoftware/PDF Reader2 versions
    cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*range: <=2026.2.0.39747
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

1