CVE-2026-18622: Foxit PDF Editor

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field duplication. This may mislead users into trusting tampered documents, since the UI cannot accurately reflect the actual integrity status of signatures.

Affected products

• Foxit PDF Editor: up to and including 13.2.5.24109; from 14.0.0.33046, up to and including 14.0.5.33580; from 2023.1.0.15510, up to and including 2023.3.0.23028; from 2024.1.0.23997, up to and including 2024.4.1.27687; from 2025.1.0.27937, up to and including 2025.3.0.35737; from 2026.1.0.36452, up to and including 2026.1.2.36540; …
• Foxit PDF Reader: up to and including 2026.1.2.36540; up to and including 2026.1.2.70304

Published 2026-08-13. Last modified 2026-09-10.