Input validation error in Foxit PDF Editor (formerly Foxit PhantomPDF) and Foxit PDF Reader for Windows - CVE-2026-5941
Published: April 27, 2026
Vulnerability identifier: #VU128007
CSH Severity: High
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-5941
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code.
The vulnerability exists due to improper input validation in malformed form field hierarchy parsing when processing malformed form field hierarchies. A remote attacker can trick the victim into opening a specially crafted document to execute arbitrary code.
The issue results from improper parsing logic that misidentifies non-signature data as valid signatures during internal data structure construction.
Affected software
Foxit PDF Editor (formerly Foxit PhantomPDF)
Foxit PDF Reader for Windows
Foxit PDF Reader for Windows
How to mitigate CVE-2026-5941
Install security update from vendor's website.
Foxit PDF Editor (formerly Foxit PhantomPDF) - addressed in versions 14.0.4.33508, 2026.1.1.36485
Foxit PDF Reader for Windows - update to 2026.1.1.36485
Foxit PDF Reader for Windows - update to 2026.1.1.36485