ZDI-CAN-29491 HIGH 7.8 Upcoming Mar 30, 2026

Foxit

Foxit is a well-known software company specializing in PDF readers and document management solutions. This high-severity vulnerability (CVSS 7.8) requires local access and user interaction to exploit, but once successful grants an attacker high-level control over confidentiality, integrity, and availability of the affected system with no authentication needed. Security teams should monitor for patches after the July 28, 2026 deadline and watch for exploitation attempts targeting Foxit users, particularly in environments where local file access or document opening could be weaponized.

Advisory Details
Researcher Anonymous
Reported March 30, 2026
Deadline July 28, 2026 103d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy