Foxit Workspace - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/foxit-workspace/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 09 Nov 2026 22:11:21 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgFoxit Workspace: SSRF and XSS vulnerabilities (CVE-2026-119431, CVE-2026-119432, CVE-2026-119433)https://feed.craftedsignal.io/briefs/2026-11-foxit-vulnerabilities/Mon, 09 Nov 2026 22:11:21 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-foxit-vulnerabilities/Multiple vulnerabilities in Foxit Workspace, identified as CVE-2026-119431, CVE-2026-119432, and CVE-2026-119433, allow for Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS) attacks.The French National Cybersecurity Agency (ANSSI) has published an advisory regarding multiple vulnerabilities in Foxit Workspace. The flaws consist of Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS) injection vectors. The vulnerabilities are tracked under CVE-2026-119431, CVE-2026-119432, and CVE-2026-119433. Users are advised to consult the official Foxit security bulletin for remediation steps and patch availability.

Impact

Successful exploitation may allow an attacker to perform unauthorized SSRF actions against internal services or execute malicious scripts via XSS in the context of the user session.

Recommendation

]]>highadvisory