CVE-2026-18622 PUBLISHED

Foxit PDF Editor/Reader's signature-validation pop-up reports modified certified documents as valid

Assigner: Foxit
Reserved: 03.08.2026 Published: 13.08.2026 Updated: 13.08.2026

Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field duplication. This may mislead users into trusting tampered documents, since the UI cannot accurately reflect the actual integrity status of signatures.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS Score: 4.7

Product Status

Vendor Foxit Software Inc.
Product Foxit PDF Editor
Versions Default: unaffected
  • Version Versions 2026.1.2 and earlier is affected
  • Version Versions 14.0.5 and earlier is affected
  • Version Versions 13.2.5 and earlier is affected
Vendor Foxit Software Inc.
Product Foxit PDF Reader
Versions Default: unaffected
  • Version Versions 2026.1.2 and earlier is affected

Credits

  • Enzo da Rosa Brum, Frederico Schardong, and Ricardo Felipe Custódio, all of the Computer Security Laboratory (LabSEC), Federal University of Santa Catarina (UFSC), Brazil finder

References

Problem Types

  • CWE-451: User Interface (UI) Misrepresentation of Critical Information CWE

Impacts

  • CAPEC-148: Content Spoofing