Dashboard / CVE-2026-119431

CVE-2026-119431

HIGH
MEDIUM Priority: 0.03 BB Relevance: 65/100
Published: 2026-11-06 Modified: 2026-11-12 First seen: 2026-11-06 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact Scope Change

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: Changed
C: High
I: None
A: None

Description

A server-side request forgery (SSRF) vulnerability exists in Foxit Workspace's file-upload functionality. Insufficient validation of user-supplied links may allow a remote attacker to induce the server to access internal resources and return their contents, potentially resulting in sensitive information disclosure and unauthorized access to internal services.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
Foxit Software Inc. Foxit Workspace before 2026-11-6
Foxit Software Inc. Foxit Workspace before 2026-11-6

References & Advisories (1)

Bug Bounty Relevance

65 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

7.7 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS — Exploitation Probability

0.34%
Raw Score 0.003400
Percentile 27.8%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00340
2026-11-12
0.00340
2026-11-10
0.00340
2026-11-09
0.00340
2026-11-08
0.00340
2026-11-07
0.00340
2026-11-06
0.00340

Intelligence Sources

mitre ref →
nvd ref →

External Links