{"affected":[{"defaultStatus":"unaffected","product":"Foxit Workspace","source":"CNA: Foxit","vendor":"Foxit Software Inc.","versions":[{"status":"affected","version":"before 2026-11-6"}]}],"cveId":"CVE-2026-119432","cwes":["CWE-79"],"description":"A stored cross-site scripting (XSS) vulnerability exists in the Foxit Workspace's file share preview functionality. An attacker could upload a crafted file and share it with a victim. When the victim opens or previews the file, the embedded script executes in the application's origin, potentially accessing locally stored credentials and enabling credential theft.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":8.7,"severity":"high","source":"CNA: Foxit","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N","version":"3.1"},{"score":8.7,"severity":"high","source":"NVD: 14984358-7092-470d-8f34-ade47a7658a2","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N","version":"3.1"}],"modifiedAt":1793942300830,"publishedAt":1793938149003,"references":[{"source":"CNA: Foxit","tags":[],"url":"https://www.foxit.com/support/security-bulletins.html"},{"source":"14984358-7092-470d-8f34-ade47a7658a2","tags":[],"url":"https://www.foxit.com/support/security-bulletins.html"}],"remediation":[],"revision":"a713e5e50dfe5373168af34bd24c44d98b773eadeb2857ec9b1b29ffbe6eb751","sources":[{"modifiedAt":1793938149003,"name":"CNA: Foxit","retrievedAt":1793941714655,"url":"https://www.cve.org/CVERecord?id=CVE-2026-119432"},{"modifiedAt":1793942300830,"name":"NVD","retrievedAt":1793946396950,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119432"}],"ssvc":null,"status":"published","title":"Foxit Workspace Stored XSS in shared artifacts","updatedAt":1793946396950}