The vulnerability affects the update service for the FoxitPDFReaderUpdater.exe program, which is used for viewing electronic documents in PDF format within the Foxit PDF Reader (formerly Foxit Reader) and the Foxit PDF Editor (formerly Foxit PhantomPDF) PDF editing software. This vulnerability allows an attacker to escalate their privileges.

Privileged escalation via Foxit PDF updater service due to uncontrolled pathfinding.

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2026-57239	8 Jul 202607:36	–	attackerkb
Circl	CVE-2026-57239	8 Jul 202610:22	–	circl
CVE	CVE-2026-57239	8 Jul 202607:36	–	cve
Cvelist	CVE-2026-57239 Foxit PDF Editor/Reader Local Privilege Escalation	8 Jul 202607:36	–	cvelist
EUVD	EUVD-2026-42184	8 Jul 202607:36	–	euvd
Tenable Nessus	Foxit PDF Editor < 13.2.5 Multiple Vulnerabilities	8 Jul 202600:00	–	nessus
Tenable Nessus	Foxit PDF Editor < 14.0.5 Multiple Vulnerabilities	8 Jul 202600:00	–	nessus
Tenable Nessus	Foxit PDF Editor < 2026.1.2 Multiple Vulnerabilities	8 Jul 202600:00	–	nessus
Tenable Nessus	Foxit PDF Reader < 2026.1.2 Multiple Vulnerabilities	8 Jul 202600:00	–	nessus
Kaspersky	KLA91132 Multiple vulnerabilities in Foxit Reader	8 Jul 202600:00	–	kaspersky

Vulners

Node

foxit_software pdf_editorRange14.0.0.33046–14.0.4.33508

foxit_software pdf_editorRange2023.1.0.15510–2023.3.0.23028

foxit_software pdf_editorRange2024.1.0.23997–2024.4.1.27687

foxit_software pdf_editorRange2025.1.0.27937–2025.3.0.35737

foxit_software pdf_editorRange2026.1.0.36452–2026.1.1.36485

Source	Link
core-jmp	www.core-jmp.org/2026/07/escalating-privileges-foxit-pdf-reader-cve-2026-57239/
foxit	www.foxit.com/support/security-bulletins.html
web	www.web.nvd.nist.gov/view/vuln/detail

24 Jul 2026 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 26.6

CVSS 38.2

EPSS0.0017