Foxit eSign EUVD-2026-17767

Foxit released a fix deployed to the na1.foxitesign.foxit.com cloud service on 2026-03-26. As a SaaS platform, no customer action is required for patching-the fix is automatically applied server-side. Organizations should verify their eSign instance was updated by confirming the service build date or contacting Foxit support. Review audit logs from before 2026-03-26 for suspicious signing invitation acceptance patterns, specifically looking for users accepting invitations not originally sent to them or accessing documents outside their authorization scope. Implement compensating controls: enable multi-factor authentication for all eSign users to reduce account compromise risk (the primary attack prerequisite), configure signing workflows to require additional verification steps for high-value documents, and establish monitoring for anomalous signature activity patterns such as rapid acceptance of multiple invitations by single accounts. Note that MFA reduces but does not eliminate risk since the vulnerability affects authenticated sessions. For critical documents signed before the patch date, consider verification procedures to confirm signature authenticity. Detailed security bulletin available at https://www.foxit.com/support/security-bulletins.html.