Description

Addressed a potential insecure direct object reference (IDOR) vulnerability in the signing invitation acceptance process. Under certain conditions, this issue could have allowed an attacker to access or modify unauthorized resources by manipulating user-supplied object identifiers, potentially leading to forged signatures and compromising the integrity and authenticity of documents undergoing the signing process. The issue was caused by insufficient authorization validation on referenced resources during request processing.

INFO

Published Date :

2026-04-01T01:40:26.137Z

Last Modified :

2026-04-02T02:15:11.035Z

Source :

Foxit
AFFECTED PRODUCTS

The following products are affected by CVE-2026-4947 vulnerability.

Vendors Products
Foxit
  • Esign
Foxitsoftware
  • Na1.foxitesign.foxit.com
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2026-4947.

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact