high advisory October 29, 2026

Foxit: Sensitive information exposure via exposed credentials in JavaScript (CVE-2026-111419)

The Foxit official website exposes third-party authorization credentials within its client-side JavaScript code, allowing unauthorized parties to potentially harvest and misuse sensitive information.

Triage facts

Revision 1

Applicability: foxit.com
Evidence: Unknown
Severity: High
Action: Elevated
Sources: 1 public source
Freshness: Revision 1Oct 29, 11:14 UTC
Vulnerabilities: 1 CVE
Source quality: A1Likely

Foxit's official website has been identified as containing hardcoded third-party authorization credentials within its client-side JavaScript files. By inspecting the publicly accessible scripts, unauthorized actors can extract these credentials, leading to potential unauthorized access or misuse of third-party services integrated with the Foxit domain.

Impact

Unauthorized actors can obtain sensitive authorization tokens or secrets, which may allow for unauthorized access to third-party services linked to the Foxit infrastructure.

Recommendation

Review all client-side JavaScript files on corporate-controlled websites for embedded secrets or credentials.
Implement a secret scanning solution for web repositories to prevent the accidental exposure of sensitive keys.
Rotate all third-party credentials identified within the affected JavaScript files on the Foxit website immediately.

Immediate actions

Rotate all third-party authorization secrets identified within the Foxit web property

IT Operations 24h

Threat Hunt

Inspect web asset repositories or proxy logs for historical access to client-side JS files containing high-entropy strings or known credential patterns

T1552.001 medium medium confidence hunt now

Data: Proxy logs, Web asset source code

Mitigations

Remove hardcoded secrets from client-side JS and move to a server-side authenticated proxy approach

immediate Web Security Team

CVE-2026-111419