CVE-2026-119433highCWE-918

CVE-2026-119433: fallo de gravedad alta en Foxit Workspace

Server-Side Request Forgery in Foxit Workspace PDF Export

Publicada el

Seguir esta CVE+ Monitorear Foxit Workspace

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 7.7epss 0.3%
A server-side request forgery (SSRF) vulnerability exists in an undocumented API endpoint of Foxit Workspace due to insufficient validation of user-supplied URL and network parameters. A remote attacker could exploit this issue to induce the server to send requests to arbitrary internal or external resources, potentially enabling unauthorized access to internal services, network reconnaissance, and sensitive information disclosure.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Productos afectados
Foxit Software Inc. · Foxit Workspace
CVEs relacionadas — Foxit Workspace

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-119431HIGHServer-Side Request Forgery in Foxit Workspace File UploadEPSS 0.3%CVE-2026-119432HIGHFoxit Workspace Stored XSS in shared artifactsEPSS 0.3%