CVE-2026-91814
Medium · 5.3CVSS
5.3
EPSS
0.1%
Published
Sep 23, 2026
CISA due date
—
The record
A signature validation vulnerability exists in Foxit PDF Editor/Reader’s handling of incrementally updated PDF documents. Changes to visible document content may not invalidate the existing signature, allowing attackers to alter signed content and potentially carry out content spoofing while the document continues to appear validly signed.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-63182 LightSAML implements SAML 2.0 data model classes, XML serialization and deserialization… CWE-347
- CVE-2026-46560 Open Access Management (OpenAM) is an access management solution. CWE-347
- CVE-2026-119037 Business::GoCardless versions before 1.01 for Perl accept forged webhooks when a… CWE-347
- CVE-2026-119561 phpMyAdmin through 5.2.3 contains an authentication bypass vulnerability in… CWE-347
- CVE-2026-118559 Improper Verification of Cryptographic Signature vulnerability in Drupal Commerce Stripe… CWE-347
- CVE-2026-118774 Forge (also called node-forge) is a native implementation of Transport Layer Security in… CWE-347
- CVE-2026-118768 Botan is a C++ cryptography library. CWE-347
- CVE-2026-88078 Improper verification of cryptographic signature in Microsoft Edge (Chromium-based)… CWE-347