CVE-2026-119432

A stored cross-site scripting (XSS) vulnerability exists in the Foxit Workspace file share preview functionality. An authenticated remote attacker can upload and share a maliciously crafted file; when a victim views or previews this file, the embedded script executes within the application's orig...

EUVD-2026-117888

A stored cross-site scripting XSS vulnerability exists in the Foxit Workspace's file share preview functionality. An attacker could upload a crafted file and share it with a victim. When the victim opens or previews the file, the embedded script executes in the application's origin, potentially...

CVE-2026-119431

A Server-Side Request Forgery (SSRF) vulnerability exists in the file-upload functionality of Foxit Workspace . The root cause is insufficient validation of user-supplied links , which could allow a remote attacker to force the server to access and return contents from internal resources. This co...

EUVD-2026-117887

A server-side request forgery SSRF vulnerability exists in Foxit Workspace's file-upload functionality. Insufficient validation of user-supplied links may allow a remote attacker to induce the server to access internal resources and return their contents, potentially resulting in sensitive...

EUVD-2026-117886

A server-side request forgery SSRF vulnerability exists in an undocumented API endpoint of Foxit Workspace due to insufficient validation of user-supplied URL and network parameters. A remote attacker could exploit this issue to induce the server to send requests to arbitrary internal or external...

CVE-2026-119433

A server-side request forgery (SSRF) vulnerability exists in an undocumented API endpoint of Foxit Workspace . The flaw stems from insufficient validation of network parameters and URLs supplied by users. A remote attacker could leverage this to force the server to make requests to arbitrary inte...

CVE-2026-119432: Foxit Software Inc. Foxit Workspace: A stored cross-site scripting (XSS) vulnerability exists in the Foxit Workspace's file share preview functionality

A stored cross-site scripting XSS vulnerability exists in the Foxit Workspace's file share preview functionality. An attacker could upload a crafted file and share it with a victim. When the victim opens or previews the file, the embedded script executes in the application's origin, potentially...

CVE-2026-119433: Foxit Software Inc. Foxit Workspace: A server-side request forgery (SSRF) vulnerability exists in an undocumented API endpoint of Foxit Workspace due to…

A server-side request forgery SSRF vulnerability exists in an undocumented API endpoint of Foxit Workspace due to insufficient validation of user-supplied URL and network parameters. A remote attacker could exploit this issue to induce the server to send requests to arbitrary internal or external...

CVE-2026-119431: Foxit Software Inc. Foxit Workspace: A server-side request forgery (SSRF) vulnerability exists in Foxit Workspace's file-upload functionality

A server-side request forgery SSRF vulnerability exists in Foxit Workspace's file-upload functionality. Insufficient validation of user-supplied links may allow a remote attacker to induce the server to access internal resources and return their contents, potentially resulting in sensitive...