All news
AES-256 PDFs from MuPDF < 1.28.5 and one Foxit build open without the password: update MuPDF
Researchers at v12.sh showed on 28 October that several PDF programs and libraries generate the AES-256 file key from randomness so limited it can be guessed. The key falls in milliseconds for MuPDF before 1.28.5 and, for recent files, Foxit PDF Reader build 2026.1.3.36551. Decryptors for both are public. The researchers told the vendors; a fix is reported only for MuPDF.