Skip to content

CVE record · 1 source

CVE-2026-111417

CVSS 7.5

A broken access control vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service due to the use of a shared token for…

Vendor: Foxit / Nitro / PDF-XChange
Product: foxit.com
CVSS v3.1: 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-639
Exposure class: Endpoint security

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

17

CVE NVD 3d ago

A broken access control vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service due to the use of a shared token for…

A broken access control vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service due to the use of a shared token for submitted conversion documents. This may allow unauthorized users to access…

CVSS 7.5 CVE-2026-111417 Foxit / Nitro / PDF-XChange