CVE-2026-18597: high-severity vulnerability in Foxit PDF Services API
Blind SSRF on Foxit PDF Services API
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.5epss 0.3%
The PDF creation feature of Foxit PDF Services API supports referencing external files. Although local file access is restricted, an attacker could trigger an SSRF vulnerability by using URL redirection to bypass validation, leading to information disclosure.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Affected products
Foxit Software Inc. · Foxit PDF Services APIRelated CVEs — Foxit PDF Services API
In the same product, most dangerous first.