{"affected":[{"defaultStatus":"unaffected","product":"Foxit Workspace","source":"CNA: Foxit","vendor":"Foxit Software Inc.","versions":[{"status":"affected","version":"before 2026-11-6"}]}],"cveId":"CVE-2026-119431","cwes":["CWE-918"],"description":"A server-side request forgery (SSRF) vulnerability exists in Foxit Workspace's file-upload functionality. Insufficient validation of user-supplied links may allow a remote attacker to induce the server to access internal resources and return their contents, potentially resulting in sensitive information disclosure and unauthorized access to internal services.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.7,"severity":"high","source":"CNA: Foxit","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","version":"3.1"},{"score":7.7,"severity":"high","source":"NVD: 14984358-7092-470d-8f34-ade47a7658a2","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","version":"3.1"}],"modifiedAt":1793942300677,"publishedAt":1793938147699,"references":[{"source":"CNA: Foxit","tags":[],"url":"https://www.foxit.com/support/security-bulletins.html"},{"source":"14984358-7092-470d-8f34-ade47a7658a2","tags":[],"url":"https://www.foxit.com/support/security-bulletins.html"}],"remediation":[],"revision":"9b72c553fdca680b44ed614ed22fa6e97b0ba18a57126c9d3a5c1254e6015f1d","sources":[{"modifiedAt":1793938147699,"name":"CNA: Foxit","retrievedAt":1793941713553,"url":"https://www.cve.org/CVERecord?id=CVE-2026-119431"},{"modifiedAt":1793942300677,"name":"NVD","retrievedAt":1793946396772,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119431"}],"ssvc":null,"status":"published","title":"Server-Side Request Forgery in Foxit Workspace File Upload","updatedAt":1793946396772}