CVE-2026-111418
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Oct 29, 2026
Vendor
unknown
Description
A server-side request forgery (SSRF) vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service. Support for ZIP-formatted input can bypass restrictions on requests to internal IP addresses, potentially allowing discovery of internal network resources.