Foxit PDF Editor/Reader Multiple Vulnerabilities CVSS 7.8

CERT-Bund published Security Advisory WID-SEC-2026-0934 identifying multiple vulnerabilities in Foxit PDF Editor and Foxit PDF Reader versions earlier than 2026.1. The affected products run on Linux, UNIX, Windows, and other operating systems. The vulnerabilities have a CVSS Base Score of 7.8 (high) and a Temporal Score of 6.8 (medium), with no remote attack vector. The vulnerabilities could allow an unauthenticated attacker to disclose information, cause denial of service, or execute arbitrary code.

Organizations using Foxit PDF Editor or Reader should verify their installed versions and update to version 2026.1 or later to apply available mitigations. No specific compliance deadline is stated. While the advisory is informational rather than a binding regulatory requirement, the vulnerabilities present genuine security risks requiring prompt attention from IT security teams and end users.