CVE-2026-5936

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-5936", "assignerOrgId": "14984358-7092-470d-8f34-ade47a7658a2", "state": "PUBLISHED", "assignerShortName": "Foxit", "dateReserved": "2026-04-09T03:41:58.832Z", "datePublished": "2026-04-13T06:57:40.220Z", "dateUpdated": "2026-04-13T13:50:29.768Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "14984358-7092-470d-8f34-ade47a7658a2", "shortName": "Foxit", "dateUpdated": "2026-04-13T06:57:40.220Z"}, "title": "Server-Side Request Forgery (SSRF) via URL Parameter in Foxit PDF Services API", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-918", "description": "CWE-918 Server-Side request forgery (SSRF)", "type": "CWE"}]}], "impacts": [{"descriptions": [{"lang": "en", "value": "Information Disclosure"}]}], "affected": [{"vendor": "Foxit Software Inc.", "product": "Foxit PDF Services API", "versions": [{"status": "affected", "version": "before 2026-04-07"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests to arbitrary destinations. This behavior may be exploited to probe internal network services, access otherwise unreachable endpoints (e.g., cloud metadata services), or bypass network access controls, potentially leading to sensitive information disclosure and further compromise of the internal environment.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests to arbitrary destinations. This behavior may be exploited to probe internal network services, access otherwise unreachable endpoints (e.g., cloud metadata services), or bypass network access controls, potentially leading to sensitive information disclosure and further compromise of the internal environment."}]}], "references": [{"url": "https://www.foxit.com/support/security-bulletins.html"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "availabilityImpact": "NONE", "baseSeverity": "HIGH", "baseScore": 8.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N"}}], "credits": [{"lang": "en", "value": "Vedant Roy of Ultimate Kronos Group(UKG)", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.1"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-13T13:50:20.644193Z", "id": "CVE-2026-5936", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-13T13:50:29.768Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-5936", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-13T13:50:20.644193Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-13T13:50:26.082Z"}}], "cna": {"title": "Server-Side Request Forgery (SSRF) via URL Parameter in Foxit PDF Services API", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Vedant Roy of Ultimate Kronos Group(UKG)"}], "impacts": [{"descriptions": [{"lang": "en", "value": "Information Disclosure"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Foxit Software Inc.", "product": "Foxit PDF Services API", "versions": [{"status": "affected", "version": "before 2026-04-07"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.foxit.com/support/security-bulletins.html"}], "x_generator": {"engine": "Vulnogram 1.0.1"}, "descriptions": [{"lang": "en", "value": "An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests to arbitrary destinations. This behavior may be exploited to probe internal network services, access otherwise unreachable endpoints (e.g., cloud metadata services), or bypass network access controls, potentially leading to sensitive information disclosure and further compromise of the internal environment.", "supportingMedia": [{"type": "text/html", "value": "An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests to arbitrary destinations. This behavior may be exploited to probe internal network services, access otherwise unreachable endpoints (e.g., cloud metadata services), or bypass network access controls, potentially leading to sensitive information disclosure and further compromise of the internal environment.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-918", "description": "CWE-918 Server-Side request forgery (SSRF)"}]}], "providerMetadata": {"orgId": "14984358-7092-470d-8f34-ade47a7658a2", "shortName": "Foxit", "dateUpdated": "2026-04-13T06:57:40.220Z"}}}, "cveMetadata": {"cveId": "CVE-2026-5936", "state": "PUBLISHED", "dateUpdated": "2026-04-13T13:50:29.768Z", "dateReserved": "2026-04-09T03:41:58.832Z", "assignerOrgId": "14984358-7092-470d-8f34-ade47a7658a2", "datePublished": "2026-04-13T06:57:40.220Z", "assignerShortName": "Foxit"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Foxit PDF Services API", "vendor": "Foxit Software Inc.", "versions": [{"status": "affected", "version": "before 2026-04-07"}]}], "source": "14984358-7092-470d-8f34-ade47a7658a2"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:foxit:pdf_services_api:*:*:*:*:*:*:*:*", "matchCriteriaId": "07237F4D-7EA9-4226-9456-093CEF8C2688", "versionEndExcluding": "2026-04-07", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests to arbitrary destinations. This behavior may be exploited to probe internal network services, access otherwise unreachable endpoints (e.g., cloud metadata services), or bypass network access controls, potentially leading to sensitive information disclosure and further compromise of the internal environment."}, {"lang": "es", "value": "Un atacante puede controlar una solicitud HTTP del lado del servidor al proporcionar una URL manipulada, haciendo que el servidor inicie solicitudes a destinos arbitrarios. Este comportamiento puede ser explotado para sondear servicios de red internos, acceder a puntos finales que de otro modo ser\u00edan inalcanzables (p. ej., servicios de metadatos en la nube), o eludir controles de acceso a la red, lo que podr\u00eda conducir a la revelaci\u00f3n de informaci\u00f3n sensible y a un mayor compromiso del entorno interno."}], "id": "CVE-2026-5936", "lastModified": "2026-10-26T22:10:00.163", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.1, "impactScore": 4.7, "source": "14984358-7092-470d-8f34-ade47a7658a2", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-5936", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-04-13T13:50:20.644193Z", "version": "2.0.3"}}]}, "published": "2026-04-13T07:16:50.710", "references": [{"source": "14984358-7092-470d-8f34-ade47a7658a2", "tags": ["Vendor Advisory"], "url": "https://www.foxit.com/support/security-bulletins.html"}], "sourceIdentifier": "14984358-7092-470d-8f34-ade47a7658a2", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-918"}], "source": "14984358-7092-470d-8f34-ade47a7658a2", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,2026-04-07)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Foxit PDF Services API", "source": "cna", "vendor": "Foxit Software Inc."}, "product": "foxit_pdf_services_api", "vendor": "foxitsoftware"}], "analysis": {"en": {"generated_at": "2026-04-13T08:51:15.024217+00:00", "value": {"mitigation_remediation": ["Apply the latest Foxit Firmware or software update for the PDF Services API as announced by Foxit Security Bulletin", "Restrict outbound network traffic from the API to a whitelist of approved IP addresses or destinations, blocking unauthorized internal or external targets", "Enable logging and monitoring of outgoing HTTP requests to detect anomalous or unexpected URL patterns that may indicate SSRF exploitation attempts"], "summary": {"action": "Immediate Patch", "impact": "Sensitive Information Disclosure via internal network access"}, "threat_synthesis": {"affected_systems": "The vulnerability affects Foxit Software Inc.\u2019s Foxit PDF Services API. No specific product versions are listed in the available CNAs, so any deployment of the API may be impacted until patching occurs.", "description_and_impact": "An attacker can supply a crafted URL to the Foxit PDF Services API, causing the server to execute a request to an arbitrary destination. This Server\u2011Side Request Forgery (CWE\u2011918) enables probing of internal services, retrieval of data from cloud metadata services, and potential bypass of network controls. The disclosure of internal resources may lead to further compromise of the internal environment if additional vulnerabilities exist.", "risk_and_exploitability": "The CVSS score of 8.5 indicates a highly critical severity. Exploit likelihood is uncertain as EPSS data is not provided, but the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is remote, based on the fact that the vulnerability requires an attacker to send a crafted URL to a publicly accessible API endpoint. If successful, the attacker can redirect internal requests to arbitrary addresses, potentially exposing sensitive data or facilitating lateral movement."}}}}, "created": "2026-04-13T12:36:50.379100+00:00", "updated": "2026-04-13T12:52:38.781086+00:00", "vendors": ["foxitsoftware", "foxitsoftware$PRODUCT$foxit_pdf_services_api"]}