[ CVE-2026-111417 · Published 29 Oct 2026 ]
Vulnerability in Foxit Software Inc. foxit.com
CVSS 7.5
EPSS <1%1 agency advisoryFix available
[ Description ]Official description
A broken access control vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service due to the use of a shared token for submitted conversion documents. This may allow unauthorized users to access documents submitted by other users.
[ Fixes ]Fixes and patches
- Security bulletin: FoxIT security-bulletins.phpVendor patch or bulletin · CERT-FR · foxitsoftware.com/support/security-bulletins.php, cited by CERT-FR CERTFR-2026-AVI-1418
[ Advisories ]Government CERT advisories
-
CERT-FRCERTFR-2026-AVI-1418
Multiple vulnerabilities in Foxit Online Services Translated from French
Multiple vulnerabilities have been discovered in Foxit Online Services. Some of them allow an attacker to cause a breach of data confidentiality, a breach of data integrity and server-side request forgery (SSRF).