CVE-2026-4947

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-4947", "assignerOrgId": "14984358-7092-470d-8f34-ade47a7658a2", "state": "PUBLISHED", "assignerShortName": "Foxit", "dateReserved": "2026-03-27T03:21:37.486Z", "datePublished": "2026-04-01T01:40:26.137Z", "dateUpdated": "2026-04-02T02:15:11.035Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "14984358-7092-470d-8f34-ade47a7658a2", "shortName": "Foxit", "dateUpdated": "2026-04-02T02:15:11.035Z"}, "title": "Insecure Direct Object Reference (IDOR) Leading to Signature Forgery in Foxit eSign", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-284", "description": "CWE-284: Improper Access Control", "type": "CWE"}]}], "impacts": [{"descriptions": [{"lang": "en", "value": "Horizontal Privilege Escalation"}]}], "affected": [{"vendor": "Foxit Software Inc.", "product": "na1.foxitesign.foxit.com", "versions": [{"status": "affected", "version": "before 2026-03-26"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Addressed a potential insecure direct object reference (IDOR) vulnerability in the signing invitation acceptance process. Under certain conditions, this issue could have allowed an attacker to access or modify unauthorized resources by manipulating user-supplied object identifiers, potentially leading to forged signatures and compromising the integrity and authenticity of documents undergoing the signing process. The issue was caused by insufficient authorization validation on referenced resources during request processing.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Addressed a potential insecure direct object reference (IDOR) vulnerability in the signing invitation acceptance process. Under certain conditions, this issue could have allowed an attacker to access or modify unauthorized resources by manipulating user-supplied object identifiers, potentially leading to forged signatures and compromising the integrity and authenticity of documents undergoing the signing process. The issue was caused by insufficient authorization validation on referenced resources during request processing."}]}], "references": [{"url": "https://www.foxit.com/support/security-bulletins.html"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "availabilityImpact": "NONE", "baseSeverity": "HIGH", "baseScore": 7.1, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N"}}], "credits": [{"lang": "en", "value": "Vedant Roy of Ultimate Kronos Group(UKG)", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.1"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-01T14:19:17.594576Z", "id": "CVE-2026-4947", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-01T15:51:36.015Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-4947", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-01T14:19:17.594576Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-01T14:19:20.997Z"}}], "cna": {"title": "Insecure Direct Object Reference (IDOR) Leading to Signature Forgery in Foxit eSign", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Vedant Roy of Ultimate Kronos Group(UKG)"}], "impacts": [{"descriptions": [{"lang": "en", "value": "Horizontal Privilege Escalation"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Foxit Software Inc.", "product": "na1.foxitesign.foxit.com", "versions": [{"status": "affected", "version": "before 2026-03-26"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.foxit.com/support/security-bulletins.html"}], "x_generator": {"engine": "Vulnogram 1.0.1"}, "descriptions": [{"lang": "en", "value": "Addressed a potential insecure direct object reference (IDOR) vulnerability in the signing invitation acceptance process. Under certain conditions, this issue could have allowed an attacker to access or modify unauthorized resources by manipulating user-supplied object identifiers, potentially leading to forged signatures and compromising the integrity and authenticity of documents undergoing the signing process. The issue was caused by insufficient authorization validation on referenced resources during request processing.", "supportingMedia": [{"type": "text/html", "value": "Addressed a potential insecure direct object reference (IDOR) vulnerability in the signing invitation acceptance process. Under certain conditions, this issue could have allowed an attacker to access or modify unauthorized resources by manipulating user-supplied object identifiers, potentially leading to forged signatures and compromising the integrity and authenticity of documents undergoing the signing process. The issue was caused by insufficient authorization validation on referenced resources during request processing.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-284", "description": "CWE-284: Improper Access Control"}]}], "providerMetadata": {"orgId": "14984358-7092-470d-8f34-ade47a7658a2", "shortName": "Foxit", "dateUpdated": "2026-04-02T02:15:11.035Z"}}}, "cveMetadata": {"cveId": "CVE-2026-4947", "state": "PUBLISHED", "dateUpdated": "2026-04-02T02:15:11.035Z", "dateReserved": "2026-03-27T03:21:37.486Z", "assignerOrgId": "14984358-7092-470d-8f34-ade47a7658a2", "datePublished": "2026-04-01T01:40:26.137Z", "assignerShortName": "Foxit"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "na1.foxitesign.foxit.com", "vendor": "Foxit Software Inc.", "versions": [{"status": "affected", "version": "before 2026-03-26"}]}], "source": "14984358-7092-470d-8f34-ade47a7658a2"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:foxit:esign:*:*:*:*:*:*:*:*", "matchCriteriaId": "6BF12318-45A0-415D-B898-38513F760C3A", "versionEndExcluding": "2026-03-26", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Addressed a potential insecure direct object reference (IDOR) vulnerability in the signing invitation acceptance process. Under certain conditions, this issue could have allowed an attacker to access or modify unauthorized resources by manipulating user-supplied object identifiers, potentially leading to forged signatures and compromising the integrity and authenticity of documents undergoing the signing process. The issue was caused by insufficient authorization validation on referenced resources during request processing."}, {"lang": "es", "value": "Se abord\u00f3 una posible vulnerabilidad de referencia directa a objeto inseguro (IDOR) en el proceso de aceptaci\u00f3n de invitaci\u00f3n de firma. Bajo ciertas condiciones, este problema podr\u00eda haber permitido a un atacante acceder o modificar recursos no autorizados manipulando identificadores de objeto proporcionados por el usuario, lo que podr\u00eda llevar a firmas falsificadas y comprometer la integridad y autenticidad de los documentos en proceso de firma. El problema fue causado por una validaci\u00f3n de autorizaci\u00f3n insuficiente en los recursos referenciados durante el procesamiento de solicitudes."}], "id": "CVE-2026-4947", "lastModified": "2026-06-17T10:57:29.107", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 4.2, "source": "14984358-7092-470d-8f34-ade47a7658a2", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-4947", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-04-01T14:19:17.594576Z", "version": "2.0.3"}}]}, "published": "2026-04-01T02:16:03.740", "references": [{"source": "14984358-7092-470d-8f34-ade47a7658a2", "tags": ["Vendor Advisory"], "url": "https://www.foxit.com/support/security-bulletins.html"}], "sourceIdentifier": "14984358-7092-470d-8f34-ade47a7658a2", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-284"}], "source": "14984358-7092-470d-8f34-ade47a7658a2", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,2026-03-26)"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 99.0, "source": "matching"}]}, "original": {"product": "na1.foxitesign.foxit.com", "source": "cna", "vendor": "Foxit Software Inc."}, "product": "na1.foxitesign.foxit.com", "vendor": "foxitsoftware"}], "analysis": {"en": {"generated_at": "2026-04-02T04:46:33.964383+00:00", "value": {"mitigation_remediation": ["Apply the official patch or upgrade to the latest Foxit eSign version as detailed in the security bulletin at https://www.foxit.com/support/security-bulletins.html", "Verify that all signing invitation requests enforce strict authorization checks on referenced resources to prevent direct object reference", "Review and tighten user access controls for signing invitation generation and acceptance processes", "Monitor application logs for anomalous object identifier usage and unauthorized access attempts", "Validate signatures and ensure that signature verification processes are enabled to detect any tampering"], "summary": {"action": "Immediate Patch", "impact": "Signature Forgery / Integrity Compromise"}, "threat_synthesis": {"affected_systems": "Affected systems include Foxit eSign (platform foxitesign.foxit.com) as listed by the CNA. No explicit version information is provided, so all instances of the platform that process signing invitations may be susceptible until a patch is applied.", "description_and_impact": "The vulnerability is an insecure direct object reference that permits an attacker to manipulate object identifiers during the signing invitation acceptance process. This allows unauthorized access or modification of resources, potentially resulting in forged signatures and compromising the integrity and authenticity of documents. The weakness falls under access control failure (CWE-284).", "risk_and_exploitability": "The CVSS score of 7.1 indicates moderate to high severity, while the EPSS score of less than 1% suggests a low probability of exploitation at this time. The vulnerability is not currently catalogued in the CISA KEV list. Likely attack vectors involve remote web requests where attackers manipulate resource identifiers; the vulnerability can be leveraged without additional prerequisites beyond sending a crafted request. Mitigation requires applying the vendor\u2019s patch or upgrade, enforcing proper authorization checks on all referenced resources, and monitoring for suspicious activity to prevent forged signatures."}}}}, "created": "2026-04-02T07:50:27.023715+00:00", "updated": "2026-04-02T20:18:33.465046+00:00", "vendors": ["foxitsoftware", "foxitsoftware$PRODUCT$na1.foxitesign.foxit.com"]}