PDF CVE-2026-57259 Foxit XXE Callback
| Reporter | Title | Published | Views | Family All 14 |
|---|---|---|---|---|
| CVE-2026-57259 | 8 Jul 202607:36 | – | attackerkb | |
| CVE-2026-57259 | 8 Jul 202612:02 | – | circl | |
| CVE-2026-57259 | 8 Jul 202607:36 | – | cve | |
| CVE-2026-57259 Foxit PDF Editor/Reader XDP XFA XXE arbitrary local file read | 8 Jul 202607:36 | – | cvelist | |
| EUVD-2026-42197 | 8 Jul 202607:36 | – | euvd | |
| Foxit PDF Editor < 13.2.5 Multiple Vulnerabilities | 8 Jul 202600:00 | – | nessus | |
| Foxit PDF Editor < 14.0.5 Multiple Vulnerabilities | 8 Jul 202600:00 | – | nessus | |
| Foxit PDF Editor < 2026.1.2 Multiple Vulnerabilities | 8 Jul 202600:00 | – | nessus | |
| Foxit PDF Reader < 2026.1.2 Multiple Vulnerabilities | 8 Jul 202600:00 | – | nessus | |
| KLA91132 Multiple vulnerabilities in Foxit Reader | 8 Jul 202600:00 | – | kaspersky |
10
#!/usr/bin/env python3
# -*- coding: utf-8 -*-
from kittysploit import *
from lib.pdf.mixins import PdfCveMixin
from lib.pdf.generators.xxe import write_foxit_xxe_callback
class Module(Auxiliary, PdfCveMixin):
__info__ = {
"name": "PDF CVE-2026-57259 Foxit XXE Callback",
"description": (
"Generate PDF PoC for CVE-2026-57259: Foxit XML/XXE phone-home via XMP "
"parameter entity (lab callback URL). For authorized parser/viewer regression."
),
"author": ["KittySploit Team"],
"cve": ["CVE-2026-57259"],
"references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-57259"],
"tags": ["pdf", "cve-2026-57259", "xxe", "foxit", "xmp"],
}
PDF_GENERATORS = (write_foxit_xxe_callback,)
CVE_IDS = ["CVE-2026-57259"]
MODULE_TITLE = "PDF CVE-2026-57259 Foxit XXE Callback"
def run(self):
return self.run_pdf_cve()
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
21 Jul 2026 12:37Current
5.7Medium risk
Vulners AI Score5.7
CVSS 3.16.5
EPSS0.00354
SSVC