PT-2026-35403 · Foxitsoftware · Foxit Pdf Editor+1

Published 2026-04-27 · Updated 2026-04-27 · CVE-2026-5941

NVD

CVSS v3.1

7.8

High

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leading to invalid memory writes and program crashes during internal data structure construction.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2026-5941

ZDI-26-302

Affected Products

Foxit Pdf Editor

Foxit Pdf Reader

References · 5

• https://zerodayinitiative.com/advisories/ZDI-26-302 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-5941 · Security Note
• https://twitter.com/VulmonFeeds/status/2048765882315284933 · Twitter Post
• https://foxit.com/support/security-bulletins.html · Note
• https://twitter.com/CVEnew/status/2048852199623495994 · Twitter Post