The vulnerability affects the update service for the FoxitPDFReaderUpdater.exe program, which is used for viewing electronic documents in PDF format within the Foxit PDF Reader (formerly Foxit Reader) and the Foxit PDF Editor (formerly Foxit PhantomPDF) PDF editing software. This vulnerability allows an attacker to escalate their privileges.

Privileged escalation via Foxit PDF updater service due to uncontrolled pathfinding.

Reporter	Title	Published	Views	Family All 14
GithubExploit	Exploit for Uncontrolled Search Path Element in Foxit Pdf_Editor	8 Jul 202613:47	–	githubexploit
ATTACKERKB	CVE-2026-57239	8 Jul 202607:36	–	attackerkb
Circl	CVE-2026-57239	8 Jul 202610:22	–	circl
CVE	CVE-2026-57239	8 Jul 202607:36	–	cve
Cvelist	CVE-2026-57239 Foxit PDF Editor/Reader Local Privilege Escalation	8 Jul 202607:36	–	cvelist
EUVD	EUVD-2026-42184	8 Jul 202607:36	–	euvd
Tenable Nessus	Foxit PDF Editor < 13.2.5 Multiple Vulnerabilities	8 Jul 202600:00	–	nessus
Tenable Nessus	Foxit PDF Editor < 14.0.5 Multiple Vulnerabilities	8 Jul 202600:00	–	nessus
Tenable Nessus	Foxit PDF Editor < 2026.1.2 Multiple Vulnerabilities	8 Jul 202600:00	–	nessus
Tenable Nessus	Foxit PDF Reader < 2026.1.2 Multiple Vulnerabilities	8 Jul 202600:00	–	nessus

Vulners

Node

foxit_software pdf_editorRange14.0.0.33046–14.0.4.33508

foxit_software pdf_editorRange2023.1.0.15510–2023.3.0.23028

foxit_software pdf_editorRange2024.1.0.23997–2024.4.1.27687

foxit_software pdf_editorRange2025.1.0.27937–2025.3.0.35737

foxit_software pdf_editorRange2026.1.0.36452–2026.1.1.36485

Source	Link
core-jmp	www.core-jmp.org/2026/07/escalating-privileges-foxit-pdf-reader-cve-2026-57239/
foxit	www.foxit.com/support/security-bulletins.html
blog	www.blog.paradoxis.nl/escalating-all-the-privileges-with-foxit-pdf-reader-cve-2026-57239-582a78b60492
github	www.github.com/Paradoxis/CVE-2026-57239
web	www.web.nvd.nist.gov/view/vuln/detail

29 Jul 2026 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 26.6

CVSS 38.2

EPSS0.0017