PT-2026-56358 · Foxit · Foxit Reader

Published 2026-07-08 · Updated 2026-07-10 · CVE-2026-57259

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Foxit Reader (affected versions not specified)

Description An XML External Entity (XXE) issue exists where the application processes files that are not strictly in a structurally valid PDF format. By opening a malicious document disguised as a PDF, an attacker can construct malicious external entities that point to local paths via the protocol. This allows unauthorized access to any local files within the user's permission range. This issue potentially affects over 700 million devices worldwide.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XXE

Weakness Enumeration

CWE-611

Related Identifiers

CVE-2026-57259

Affected Products

Foxit Reader

References · 7

• https://foxit.com/support/security-bulletins.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-57259 · Security Note
• https://twitter.com/cyberatlas_ai/status/2075546480090272171 · Twitter Post
• https://twitter.com/CyStackSecurity/status/2075388283240980728 · Twitter Post
• https://t.me/cveNotify/193535 · Telegram Post
• https://t.me/cveNotify/190932 · Telegram Post
• https://t.me/CVEtracker/59359 · Telegram Post