PT-2026-29443 · Foxit · Foxit Esign

Vedant Roy · Published 2026-04-01 · Updated 2026-04-27 · CVE-2026-4947

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Foxit eSign (affected versions not specified)

Description A potential insecure direct object reference (IDOR) vulnerability was addressed in the signing invitation acceptance process. Under certain conditions, this issue could have allowed an attacker to access or modify unauthorized resources by manipulating user-supplied object identifiers, potentially leading to forged signatures and compromising the integrity and authenticity of documents undergoing the signing process. The issue was caused by insufficient authorization validation on referenced resources during request processing.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-4947

Affected Products

Foxit Esign

References · 6

• https://foxit.com/support/security-bulletins.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-4947 · Security Note
• https://t.me/cveNotify/161067 · Telegram Post
• https://twitter.com/CVEnew/status/2039279690805076096 · Twitter Post
• https://twitter.com/cyberbivash/status/2039182655023972707 · Twitter Post
• https://twitter.com/CVEarity/status/2039312727433437412 · Twitter Post