According to its version, the Foxit PDF Editor application (previously named Foxit PhantomPDF) installed on the remote Windows host is prior to 2026.1.1/14.0.4. It is, therefore affected by multiple vulnerabilities:

  - Document structural anomalies caused inconsistencies between page element relationships and internal index     states. When scripts triggered document modifications, object reference validity was not properly     maintained, leading to a crash when accessing an invalid pointer during page information queries.
    (CVE-2026-5943)

  - Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger     an unhandled std::invalid_argument exception, ultimately causing the program to terminate.
    (CVE-2026-5937)

  - Improper control flow management allows a crafted document action chain to cause modal dialog reentry on     the main thread, resulting in UI freeze and denial of service. (CVE-2026-5938)

  - A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the     application to crash and resulting in an arbitrary code execution. (CVE-2026-5939)

  - Calling a function that triggers a UI refresh after removing comments via a script may access an     invalidated object, leading to program crashes. (CVE-2026-5940)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Foxit PDF Editor < 14.0.4 / 2026.1.1 Multiple Vulnerabilities

high Nessus Plugin ID 310449

Version 1.3

Version 1.2

Version 1.1

Version 1.3 May 2, 2026, 1:15 AM IAVM reference STIG Severity (set to "I") Plugin Feed: 202605020115
Version 1.2 Apr 30, 2026, 4:16 PM CVSS metrics ("CVSSv3 score" set to 7.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H") CVSSv3 score source (set to "CVE-2026-5941") Plugin Feed: 202604301616
Version 1.1 Apr 28, 2026, 2:30 AM New Plugin Feed: 202604280230