PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-13126 Foxit Software Inc. CVE debrief

The CVE record for CVE-2026-13126 was published on 2026-07-08T09:16:29.307Z and has not been modified since then. This vulnerability affects Foxit PDF software, potentially allowing attackers to exploit the embedded JavaScript in PDFs, leading to program crashes. The vulnerability has a high CVSS score of 7.8, indicating high severity. Users of Foxit PDF software should review their systems for potential vulnerabilities and implement additional security measures to prevent exploitation.

Vendor
Foxit Software Inc.
Product
Foxit PDF Editor
CVSS
HIGH 7.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-07-08
Original CVE updated
2026-07-09
Advisory published
2026-07-08
Advisory updated
2026-07-09

Who should care

Users of Foxit PDF software, security teams, and operators of affected systems should review their systems for potential vulnerabilities and implement additional security measures to prevent exploitation. This vulnerability has a high CVSS score of 7.8, indicating high severity, and may require immediate attention to prevent potential attacks.

Technical summary

The embedded JavaScript in the PDF deleted the pages, making the object invalid. The application attempted to perform a write operation on the invalid pop-up annotations, resulting in the program crashing. This vulnerability affects Foxit PDF software and has a high CVSS score of 7.8, indicating high severity. The vulnerability can be exploited through malicious PDFs, potentially leading to program crashes or other unintended behavior.

Defensive priority

High priority due to high CVSS score of 7.8 and potential for exploitation through malicious PDFs.

Recommended defensive actions

  • Review and update Foxit PDF software to the latest version
  • Verify system configurations for potential vulnerabilities
  • Implement additional security measures to prevent exploitation
  • Review compensating controls for exposed systems while remediation is scheduled and verified
  • Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

Evidence is limited to the CVE record and NVD detail page. Further investigation is required to determine the full scope of the vulnerability, including potential attack vectors and affected systems. Defenders should verify system configurations and review security bulletins for Foxit PDF software.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-13126 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-13126

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-13126 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-13126

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://www.foxit.com/support/security-bulletins.html

    14984358-7092-470d-8f34-ade47a7658a2

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.