CVE-2026-57239

🗓️ 25 Aug 2026 04:30:04Reported by KitPloitType

kitploit🔗 kitploit.com👁 3 Views

LPE in Foxit PDF Reader via updater service granting NT AUTHORITY\SYSTEM access.

Reporter	Title	Published	Views	Family All 42
GithubExploit	Exploit for Uncontrolled Search Path Element in Foxit Pdf_Editor	8 Jul 202613:47	–	githubexploit
ATTACKERKB	CVE-2026-3775	1 Apr 202601:40	–	attackerkb
ATTACKERKB	CVE-2026-3780	1 Apr 202601:40	–	attackerkb
ATTACKERKB	CVE-2026-57239	8 Jul 202607:36	–	attackerkb
BDU FSTEC	The vulnerability affects the update service for the FoxitPDFReaderUpdater.exe program, which is used for viewing electronic documents in PDF format within the Foxit PDF Reader (formerly Foxit Reader) and the Foxit PDF Editor (formerly Foxit PhantomPDF) PDF editing software. This vulnerability allows an attacker to escalate their privileges.	24 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability affects the update service for PDF document viewing software called Foxit PDF Reader (previously Foxit Reader) and the PDF file editing software called Foxit PDF Editor (previously Foxit PhantomPDF). This vulnerability allows attackers to escalate their privileges and execute arbitrary code.	28 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability affects the update service for PDF document viewing software called Foxit PDF Reader (previously Foxit Reader) and the PDF file editing software called Foxit PDF Editor (previously Foxit PhantomPDF). This vulnerability allows attackers to escalate their privileges and execute arbitrary code.	28 Jul 202600:00	–	bdu_fstec
Circl	CVE-2026-3775	30 Mar 202617:00	–	circl
Circl	CVE-2026-3780	30 Mar 202617:00	–	circl
Circl	CVE-2026-57239	8 Jul 202610:22	–	circl

25 Aug 2026 04:30Current

7.8High risk

Vulners AI Score7.8

CVSS 3.17.8 - 8.2

EPSS0.00251

SSVC

Foxit PDF Reader local privilege escalation updater service NT AUTHORITY SYSTEM sideload technique