CVE-2026-18597 | BDVDB-2026-355806 Detail
Foxit SoftwareFoxit PDF Services API
Description#
The PDF creation feature of Foxit PDF Services API supports referencing external files. Although local file access is restricted, an attacker could trigger an SSRF vulnerability by using URL redirection to bypass validation, leading to information disclosure.
Impact#
Information Disclosure
Weaknesses#
- CWE-918 Server-Side Request Forgery (SSRF)
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.