Foxit Workspace: SSRF and XSS vulnerabilities (CVE-2026-119431, CVE-2026-119432, CVE-2026-119433)
Multiple vulnerabilities in Foxit Workspace, identified as CVE-2026-119431, CVE-2026-119432, and CVE-2026-119433, allow for Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS) attacks.
CVE search metadata
CVE search record: CVE-2026-119431. Severity: high. CVSS: 7.7. EPSS: 0.34%. KEV: no. Product: Foxit Workspace. Brief: Foxit Workspace: SSRF and XSS vulnerabilities (CVE-2026-119431, CVE-2026-119432, CVE-2026-119433). Brief link: https://feed.craftedsignal.io/briefs/2026-11-foxit-vulnerabilities/
CVE search record: CVE-2026-119432. Severity: high. CVSS: 8.7. EPSS: 0.32%. KEV: no. Product: Foxit Workspace. Brief: Foxit Workspace: SSRF and XSS vulnerabilities (CVE-2026-119431, CVE-2026-119432, CVE-2026-119433). Brief link: https://feed.craftedsignal.io/briefs/2026-11-foxit-vulnerabilities/
CVE search record: CVE-2026-119433. Severity: high. CVSS: 7.7. EPSS: 0.34%. KEV: no. Product: Foxit Workspace. Brief: Foxit Workspace: SSRF and XSS vulnerabilities (CVE-2026-119431, CVE-2026-119432, CVE-2026-119433). Brief link: https://feed.craftedsignal.io/briefs/2026-11-foxit-vulnerabilities/
Triage facts
Revision 1- Applicability
- Foxit Workspace
- Evidence
- Unknown
- Severity
- High
- Action
- Elevated
- Sources
- 5 public sources
- Freshness
- Revision 1Nov 9, 22:11 UTC
- Vulnerabilities
- 3 CVEs
- Source quality
- A1Roughly even chance
The French National Cybersecurity Agency (ANSSI) has published an advisory regarding multiple vulnerabilities in Foxit Workspace. The flaws consist of Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS) injection vectors. The vulnerabilities are tracked under CVE-2026-119431, CVE-2026-119432, and CVE-2026-119433. Users are advised to consult the official Foxit security bulletin for remediation steps and patch availability.
Impact
Successful exploitation may allow an attacker to perform unauthorized SSRF actions against internal services or execute malicious scripts via XSS in the context of the user session.
Recommendation
- Inventory all deployed instances of Foxit Workspace.
- Review the official Foxit security bulletins at https://www.foxitsoftware.com/support/security-bulletins.php.
- Apply security patches provided by the vendor for CVE-2026-119431, CVE-2026-119432, and CVE-2026-119433 immediately.
Immediate actions
Inventory Foxit Workspace deployments and verify patch status against vendor bulletin
Mitigations
Apply patches provided by Foxit for identified CVEs
CVE-2026-119431, CVE-2026-119432, CVE-2026-119433