{"id":"CVE-2026-91796","aliases":["EUVD-2026-85126","GHSA-3q39-rxpg-hqqg"],"status":"published","title":"Foxit PDF Editor/Reader importIcon NTLM Response Information Disclosure Vulnerability","description":"The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00174,"percentile":0.07006,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-693"],"published":"2026-09-23T07:51:02Z","modified":"2026-10-08T13:49:03Z","products":[{"vendor":"foxit","product":"pdf_editor"},{"vendor":"foxit","product":"pdf_reader"},{"vendor":"foxit software inc.","product":"foxit pdf editor"},{"vendor":"foxit software inc.","product":"foxit pdf reader"}],"references":[{"url":"https://www.foxit.com/support/security-bulletins.html","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91796"},{"url":"https://github.com/advisories/GHSA-3q39-rxpg-hqqg"}],"sources":{"cve":[{"id":"CVE-2026-91796","title":"Foxit PDF Editor/Reader importIcon NTLM Response Information Disclosure Vulnerability","description":"The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials.","status":"published","published":"2026-09-23T07:51:02.709Z","modified":"2026-09-23T14:46:30.859Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-693"],"updated_at":"2026-11-02T14:19:52.773089Z"}],"euvd":[{"id":"EUVD-2026-85126","description":"The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials.","status":"published","published":"2026-09-23T07:51:02Z","modified":"2026-09-23T14:46:30Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T17:28:00.949397Z"}],"ghsa":[{"id":"GHSA-3q39-rxpg-hqqg","title":"The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading...","description":"The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials.","status":"published","published":"2026-09-23T09:30:28Z","modified":"2026-09-23T09:30:28Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"medium"}],"cwes":["CWE-693"],"updated_at":"2026-11-02T15:12:19.869437Z"}],"nvd":[{"id":"CVE-2026-91796","description":"The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials.","status":"published","published":"2026-09-23T08:17:11.57Z","modified":"2026-10-08T13:49:03.81Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-693"],"updated_at":"2026-11-02T14:12:50.703874Z"}]}}