CVE Catalog

CVE-2026-18622

MediumCVSS 4.7
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.12%

2th percentile - higher than 2% of all known CVEs

Summary

Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field duplication. This may mislead users into trusting tampered documents, since the UI cannot accurately reflect the actual integrity status of signatures.

Risk Assessment

Users may accept tampered documents as authentic, potentially leading to fraud, incorrect decisions, or compliance violations. The issue concerns the integrity of PDF documents.

Recommendation

Update Foxit PDF Editor/Reader to the latest version that improves detection of signature field modifications. Educate users to verify signatures independently.

Original NVD description (English source)

Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field duplication. This may mislead users into trusting tampered documents, since the UI cannot accurately reflect the actual integrity status of signatures.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS