TI-2026-85720 Aliases CVE-2026-119432 GHSA-vj2g-cm34-5hhv

Stored cross-site scripting in Foxit Workspace file share preview

LOW 38CWE-79Published 2026-11-06 · Updated 2026-11-06

Key facts

Attack vector: Network
Privileges required: Low
User interaction: Required
Attack complexity: Low
Impact type: Cross-site scripting
Confidentiality · integrity · availability: High · High · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-79.

Summary

Foxit Workspace versions before 2026-11-6 are affected. A stored cross-site scripting flaw (CWE-79) in the file share preview lets a script embedded in a crafted file run in the application's origin. An attacker who shares such a file with a user can trigger the script when the victim opens or previews it, which can expose locally stored credentials to theft.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

Description from the CNA

A stored cross-site scripting (XSS) vulnerability exists in the Foxit Workspace's file share preview functionality. An attacker could upload a crafted file and share it with a victim. When the victim opens or previews the file, the embedded script executes in the application's origin, potentially accessing locally stored credentials and enabling credential theft.

Why it matters now

EPSS 0.00318 24th percentileScored 2026-11-07

Fix Fixed Foxit Workspace (Foxit Software Inc.): 2026-11-6

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Foxit Software Inc.	Foxit Workspace	before 2026-11-6	2026-11-6	Patch available	CNA

Foxit Workspace VendorFoxit Software Inc. Affected before 2026-11-6 Fixed in 2026-11-6 Patch available CNA

Remediation

Upgrade Foxit Workspace to 2026-11-6, the version that fixes this flaw.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

Fix · CNA Foxit Workspace (Foxit Software Inc.) Fixed in 2026-11-6

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product

Red Hat

Timeline

2026-11-06 Threatist record created from CVE-2026-119432
2026-11-06 Alias added: GHSA-vj2g-cm34-5hhv
2026-11-06 Affected versions changed · Red Hat
2026-11-06 CVSS score added · Red Hat
2026-11-07 Priority changed: MEDIUM → LOW

References

Other 1

https://www.foxit.com/support/security-bulletins.html

TI-2011-04633 Foxit PDF Reader < 4.3.1.0218 JavaScript File Write CVSS 4.0HIGH 8.4
TI-2016-06851 Out-of-bounds read in Foxit Reader CVSS 3.0MEDIUM 6.8
TI-2018-02932 Use after free in Foxit PDF Reader CVSS 3.1HIGH 7.8
TI-2018-02965 Use after free in Foxit PDF Reader CVSS 3.1HIGH 8.8
TI-2018-02964 Use after free in Foxit PDF Reader CVSS 3.1HIGH 8.8
TI-2018-02962 Use after free in Foxit PDF Reader CVSS 3.1HIGH 8.8

See all 120 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences