Skip to content

Product

Foxit Software Inc. Foxit Workspace vulnerabilities

3 published CVES affecting Foxit Software Inc. Foxit Workspace, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
3
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest Foxit Software Inc. Foxit Workspace CVEs

Newest publication first

  1. CVE-2026-119432 Foxit Workspace Stored XSS in shared artifacts

    Published
    HighCVSS 8.7 EPSS 0.32%

    A stored cross-site scripting (XSS) vulnerability exists in the Foxit Workspace's file share preview functionality. An attacker could upload a crafted file and share it with a victim. When the victim opens or previews the file, the embedded script executes in the application's or...

  2. CVE-2026-119431 Server-Side Request Forgery in Foxit Workspace File Upload

    Published
    HighCVSS 7.7 EPSS 0.34%

    A server-side request forgery (SSRF) vulnerability exists in Foxit Workspace's file-upload functionality. Insufficient validation of user-supplied links may allow a remote attacker to induce the server to access internal resources and return their contents, potentially resulting...

  3. CVE-2026-119433 Server-Side Request Forgery in Foxit Workspace PDF Export

    Published
    HighCVSS 7.7 EPSS 0.34%

    A server-side request forgery (SSRF) vulnerability exists in an undocumented API endpoint of Foxit Workspace due to insufficient validation of user-supplied URL and network parameters. A remote attacker could exploit this issue to induce the server to send requests to arbitrary i...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.