PT-2026-49191 · Foxitsoftware · Foxit Ai

Mrfathoni · Published 2026-06-15 · Updated 2026-06-15 · CVE-2026-12057

NVD

CVSS v3.1

8.6

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

When the application executes the JavaScript script embedded in the PDF within the sandbox, it fails to intercept some dangerous interfaces, which allows remote scripts to be loaded, resulting in arbitrary code execution.

Fix

Weakness Enumeration

CWE-829

Related Identifiers

CVE-2026-12057

Affected Products

Foxit Ai

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-12057 · Security Note
• https://foxit.com/support/security-bulletins.html · Note