High severity7.8NVD Advisory· Published Sep 23, 2026· Updated Oct 8, 2026
CVE-2026-91801
CVE-2026-91801
Description
A path traversal vulnerability exists in Foxit PDF Editor/Reader's handling of embedded PDF resources. Insufficient validation of resource file paths may allow files to be written outside their intended locations, potentially enabling arbitrary code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4(expand)+ 1 more
- (no CPE)
- cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*range: <=13.2.5.63482
(expand)+ 1 more
- (no CPE)
- cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*range: <=2026.2.0.39747
Patches
Vulnerability mechanics
References
1- www.foxit.com/support/security-bulletins.htmlnvdVendor Advisory
News mentions
1- ZDI-26-734: Foxit PDF Reader RichMedia Annotation Directory Traversal Remote Code Execution VulnerabilityZero Day Initiative · Sep 23, 2026