foxit_workspace vulnerabilities
CVEs whose affected-version data names the foxit_workspace package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-119433High· 7.7Server-Side Request Forgery in Foxit Workspace PDF Export
A server-side request forgery (SSRF) vulnerability exists in an undocumented API endpoint of Foxit Workspace due to insufficient validation of user-supplied URL and network parameters. A remote attacker could exploit this issue to induce…
CVE-2026-119431High· 7.7Server-Side Request Forgery in Foxit Workspace File Upload
A server-side request forgery (SSRF) vulnerability exists in Foxit Workspace's file-upload functionality. Insufficient validation of user-supplied links may allow a remote attacker to induce the server to access internal resources and re…
CVE-2026-119432High· 8.7Foxit Workspace Stored XSS in shared artifacts
A stored cross-site scripting (XSS) vulnerability exists in the Foxit Workspace's file share preview functionality. An attacker could upload a crafted file and share it with a victim. When the victim opens or previews the file, the embed…