Is CVE-2026-91798 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-91798?

CVE-2026-91798 has a CVSS v3 severity of HIGH (8.8).

Back

CVE-2026-91798

Description

A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the configuration file to be modified by regular users, which may lead to arbitrary script execution with higher privileges.