Foxit PDF Editor/Reader failed to validate the directory traversal path in the attachment file name, resulting in malicious attachments being able to be written to directories outside the expected se…

高危 CVSS 7.8

CVECVE-2026-91797

首次发现2026-09-23 08:31 UTC

披露时间2026-09-23 08:17 UTC

最后更新2026-09-23 08:31 UTC

通道状态auto

摘要

Foxit PDF Editor/Reader failed to validate the directory traversal path in the attachment file name, resulting in malicious attachments being able to be written to directories outside the expected secure area when the PDF is opened.

中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。

深度研判

该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。

数据来源

NVD DATABASE

原始链接

https://www.foxit.com/support/security-bulletins.html

时间线

2026-09-23 nvd_ingest NVD