Foxit PDF Vulnerabilities Allow DoS Code Execution

Summary

CERT-Bund issued security advisory WID-SEC-2026-1281 disclosing multiple vulnerabilities in Foxit PDF Reader and Foxit PDF Editor affecting versions below 2026.1.1, 14.0.4, and 13.2.4 across Windows, Linux, UNIX, and other platforms. The vulnerabilities carry a CVSS Base Score of 7.8 (high) and Temporal Score of 6.8 (medium), enabling remote attackers to conduct Denial of Service attacks or execute arbitrary code. Organizations using affected Foxit software should update to the latest patched version.

About this source

CERT-Bund is the German federal cybersecurity agency's incident response team, run by the BSI. Their advisory feed publishes vulnerability disclosures and active exploitation warnings for software in widespread enterprise use: VPN appliances, email servers, file transfer products, ERP systems, browsers, hypervisors. Around 280 advisories a month, each with a CVSS score, affected versions, and remediation guidance. The advisories are written in German but cover the same vulnerabilities that show up in CISA, NCSC-UK, and JPCERT bulletins, often hours earlier. Watch this if you patch enterprise software, run a SOC, or write detection rules. GovPing publishes each advisory with the affected vendor, CVSS score, and original CERT-Bund link.

What changed

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Parties

Related changes

OpenClaw Multiple Vulnerabilities Allow Code Execution CVSS 8.8

Priority review Apr 27, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity

GIMP Multiple Vulnerabilities Allow Code Execution, Info Disclosure

Priority review Apr 16, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity

Multiple binutils Flaws Allow DoS, Code Execution

Priority review Apr 22, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity