[ CVE-2026-111419 · Published 29 Oct 2026 ]
Vulnerability in Foxit Software Inc. foxit.com
CVSS 8.6
EPSS <1%1 agency advisoryFix available
[ Description ]Official description
A sensitive information exposure vulnerability exists on the Foxit official website because JavaScript code contains third-party authorization information. This may allow unauthorized parties to obtain or misuse the exposed credentials.
[ Fixes ]Fixes and patches
- Security bulletin: FoxIT security-bulletins.phpVendor patch or bulletin · CERT-FR · foxitsoftware.com/support/security-bulletins.php, cited by CERT-FR CERTFR-2026-AVI-1418
[ Advisories ]Government CERT advisories
-
CERT-FRCERTFR-2026-AVI-1418
Multiple vulnerabilities in Foxit Online Services Translated from French
Multiple vulnerabilities have been discovered in Foxit Online Services. Some of them allow an attacker to cause a breach of data confidentiality, a breach of data integrity and server-side request forgery (SSRF).