CVE-2026-5941
published 2026-04-27CVE-2026-5941: Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leading to invalid…
PriorityP427high7.1CVSS 3.1
AVLACLPRNUIRSUCNIHAH
EPSS
0.17%
6.5th percentile
Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leading to invalid memory writes and program crashes during internal data structure construction.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| foxit | pdf_editor | >= 14.0.0 < 14.0.4 | 14.0.4 |
| foxit | pdf_editor | >= 2023.0.0 < 2026.1.1 | 2026.1.1 |
| foxit | pdf_reader | < 2026.1.1 | 2026.1.1 |
| foxit_software_inc | foxit_pdf_editor | — | — |
| foxit_software_inc | foxit_pdf_editor | — | — |
| foxit_software_inc | foxit_pdf_reader | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-pxgr-8px7-gpc8: Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leading to inva
ghsa_unreviewed·2026-04-27
CVE-2026-5941 [HIGH] CWE-20 GHSA-pxgr-8px7-gpc8: Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leading to inva
Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leading to invalid memory writes and program crashes during internal data structure construction.
VulDB
Foxit PDF Editor/PDF Reader Data Structure denial of service
vuldb·2026-04-27·CVSS 7.8
CVE-2026-5941 [HIGH] Foxit PDF Editor/PDF Reader Data Structure denial of service
A vulnerability, which was classified as problematic, has been found in Foxit PDF Editor and PDF Reader. Affected is an unknown function of the component Data Structure Handler. Performing a manipulation results in denial of service.
This vulnerability is reported as CVE-2026-5941. The attack is possible to be carried out remotely. No exploit exists.
No detection rules found.
No public exploits indexed.
2026-04-27
Published