CVE-2026-119431

CVE-2026-119431CVE-2026-119431

Description

A server-side request forgery (SSRF) vulnerability exists in Foxit Workspace's file-upload functionality. Insufficient validation of user-supplied links may allow a remote attacker to induce the server to access internal resources and return their contents, potentially resulting in sensitive information disclosure and unauthorized access to internal services.

Scoring

CVSS 7.7 ()
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Last modified2026-11-06
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.