{"id":"CVE-2026-18622","aliases":["EUVD-2026-57737","GHSA-9462-v678-qmwm"],"status":"published","title":"Foxit PDF Editor/Reader's signature-validation pop-up reports modified certified documents as valid","description":"Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field duplication. This may mislead users into trusting tampered documents, since the UI cannot accurately reflect the actual integrity status of signatures.","severity":{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00134,"percentile":0.0295,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-451"],"published":"2026-08-13T07:00:23Z","modified":"2026-09-10T17:00:11Z","products":[{"vendor":"foxit","product":"pdf_editor"},{"vendor":"foxit","product":"pdf_reader"},{"vendor":"foxit software inc.","product":"foxit pdf editor"},{"vendor":"foxit software inc.","product":"foxit pdf reader"}],"references":[{"url":"https://www.foxit.com/support/security-bulletins.html","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-18622"},{"url":"https://github.com/advisories/GHSA-9462-v678-qmwm"}],"sources":{"cve":[{"id":"CVE-2026-18622","title":"Foxit PDF Editor/Reader's signature-validation pop-up reports modified certified documents as valid","description":"Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field duplication. This may mislead users into trusting tampered documents, since the UI cannot accurately reflect the actual integrity status of signatures.","status":"published","published":"2026-08-13T07:00:23.071Z","modified":"2026-08-13T14:15:16.968Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-451"],"updated_at":"2026-11-02T14:20:12.60856Z"}],"euvd":[{"id":"EUVD-2026-57737","description":"Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field duplication. This may mislead users into trusting tampered documents, since the UI cannot accurately reflect the actual integrity status of signatures.","status":"published","published":"2026-08-13T07:00:23Z","modified":"2026-08-13T14:15:16Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T18:01:56.761721Z"}],"ghsa":[{"id":"GHSA-9462-v678-qmwm","title":"Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified...","description":"Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field duplication. This may mislead users into trusting tampered documents, since the UI cannot accurately reflect the actual integrity status of signatures.","status":"published","published":"2026-08-13T09:31:09Z","modified":"2026-08-13T09:31:09Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-451"],"updated_at":"2026-11-02T15:10:24.70819Z"}],"nvd":[{"id":"CVE-2026-18622","description":"Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field duplication. This may mislead users into trusting tampered documents, since the UI cannot accurately reflect the actual integrity status of signatures.","status":"published","published":"2026-08-13T07:17:06.763Z","modified":"2026-09-10T17:00:11.15Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-451"],"updated_at":"2026-11-02T14:12:37.217486Z"}]}}