TI-2026-82336 Aliases CVE-2026-111418 GHSA-jf69-hhpp-fqgp

Server-side request forgery in Foxit website HTML-to-PDF service

LOW 39CWE-918Published 2026-10-29 · Updated 2026-10-29

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: High · None · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-918 and the CVSS impact.

Summary

Foxit Software Inc. foxit.com HTML-to-PDF conversion service is affected before 2026-10-29 and contains a server-side request forgery flaw (CWE-918). Support for ZIP-formatted input can bypass restrictions on requests to internal IP addresses. An unauthenticated remote attacker can use this to discover internal network resources.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Description from the CNA

A server-side request forgery (SSRF) vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service. Support for ZIP-formatted input can bypass restrictions on requests to internal IP addresses, potentially allowing discovery of internal network resources.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00435 38th percentileScored 2026-11-07

Fix Fixed foxit.com (Foxit Software Inc.): 2026-10-29

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Foxit Software Inc.	foxit.com	before 2026-10-29	2026-10-29	Patch available	CNA

foxit.com VendorFoxit Software Inc. Affected before 2026-10-29 Fixed in 2026-10-29 Patch available CNA

Remediation

The sources list no fixed version for foxit.com.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Fix · CNA foxit.com (Foxit Software Inc.) Fixed in 2026-10-29

Timeline

2026-10-29 Threatist record created from CVE-2026-111418
2026-10-29 CISA SSVC decision points changed
2026-10-29 Priority changed: MEDIUM → LOW
2026-10-29 Alias added: GHSA-jf69-hhpp-fqgp

References

Other 1

https://www.foxit.com/support/security-bulletins.html

TI-2011-04633 Foxit PDF Reader < 4.3.1.0218 JavaScript File Write CVSS 4.0HIGH 8.4
TI-2016-06851 Out-of-bounds read in Foxit Reader CVSS 3.0MEDIUM 6.8
TI-2018-02932 Use after free in Foxit PDF Reader CVSS 3.1HIGH 7.8
TI-2018-02965 Use after free in Foxit PDF Reader CVSS 3.1HIGH 8.8
TI-2018-02964 Use after free in Foxit PDF Reader CVSS 3.1HIGH 8.8
TI-2018-02962 Use after free in Foxit PDF Reader CVSS 3.1HIGH 8.8

See all 120 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences