Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-111417

Cross-user Document Access on Foxit Official Website's HTML-to-PDF Service

Description

A broken access control vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service due to the use of a shared token for submitted conversion documents. This may allow unauthorized users to access documents submitted by other users.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Foxit Software Inc. foxit.com

Default version status: unaffected

  • before 2026-10-29affected

References