AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

FoxitCVE-2026-18597

Foxit PDF Services API: server-side request forgery

Foxit

CVE-2026-18597 · Published Aug 6, 2026 · updated Aug 26, 2026

High8.5
No fix yet
Foxit advisory

The PDF creation feature of Foxit PDF Services API supports referencing external files. Although local file access is restricted, an attacker could trigger an SSRF vulnerability by using URL redirection to bypass validation, leading to information disclosure.

Affected versions

PackageAffectedFixed in
Foxit PDF Services API
Product
<= before 2026-07-27No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-918

More Foxit advisories

All Foxit
Medium 4.7Aug 13Foxit PDF Editor/Reader inconsistently alerts usersCVE-2026-18622no fix yetMedium 6.1Jul 8Foxit PDF: out-of-bounds readCVE-2026-57258no fix yetMedium 6.5Jul 8Foxit PDF: XML external entityCVE-2026-57259no fix yetHigh 7.8Jul 8Foxit PDF: out-of-bounds writeCVE-2026-57260no fix yetHigh 7.8Jul 8Foxit PDF: use after freeCVE-2026-57250no fix yetHigh 7.8Jul 8Foxit PDF: improper array index validationCVE-2026-57251no fix yet