Dashboard / CVE-2026-119433

CVE-2026-119433

HIGH
MEDIUM Priority: 0.03 BB Relevance: 65/100
Published: 2026-11-06 Modified: 2026-11-12 First seen: 2026-11-06 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact Scope Change

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: Changed
C: High
I: None
A: None

Description

A server-side request forgery (SSRF) vulnerability exists in an undocumented API endpoint of Foxit Workspace due to insufficient validation of user-supplied URL and network parameters. A remote attacker could exploit this issue to induce the server to send requests to arbitrary internal or external resources, potentially enabling unauthorized access to internal services, network reconnaissance, and sensitive information disclosure.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
Foxit Software Inc. Foxit Workspace before 2026-11-6
Foxit Software Inc. Foxit Workspace before 2026-11-6

References & Advisories (1)

Bug Bounty Relevance

65 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

7.7 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS — Exploitation Probability

0.34%
Raw Score 0.003400
Percentile 27.8%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00340
2026-11-12
0.00340
2026-11-10
0.00340
2026-11-09
0.00340
2026-11-08
0.00340
2026-11-07
0.00340
2026-11-06
0.00340

Intelligence Sources

mitre ref →
nvd ref →

External Links