CVE-2026-91796 — Foxit PDF Editor/Reader importIcon NTLM Response Information Disclosure Vulnerability
The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication wi…
Published: 2026-09-23 · CVSS: 6.1 · CVSS 3.1
The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7