CVE-2026-119431

A server-side request forgery (SSRF) vulnerability exists in Foxit Workspace's file-upload…

Risk score: 46/100
CVSS: 7.7 v3.1
Published: 6 Nov 2026

Open in the live forecast Today's forecast

What to know

What it is: A server-side request forgery (SSRF) vulnerability exists in Foxit Workspace's file-upload functionality. Insufficient validation of user-supplied links may allow a remote attacker to induce the server to access internal resources and return their contents, potentially resulting in sensitive information disclosure and…
Affected: See advisory
Fix: Apply the vendor's security update; see the linked advisory.
Exploitation: No known exploitation

Why it is Yellow

CVSS 7.7 high

References

https://www.foxit.com/support/security-bulletins.html

Original description

A server-side request forgery (SSRF) vulnerability exists in Foxit Workspace's file-upload functionality. Insufficient validation of user-supplied links may allow a remote attacker to induce the server to access internal resources and return their contents, potentially resulting in sensitive information disclosure and unauthorized access to internal services.

Last activity 6 Nov 2026. Patch Forecast updates every hour.