Skip to contentFoxit Software Inc. Foxit.com vulnerabilities
- foxit software inc. foxit.comCross-user Document Access on Foxit Official Website's HTML-to-PDF ServiceCVE-2026-1114177.5 High
- foxit software inc. foxit.comSSRF and JavaScript Execution in the Foxit Official Website's HTML-to-PDF ServiceCVE-2026-1114187.5 High
- foxit software inc. foxit.comHardcoded API Token in Foxit Official WebsiteCVE-2026-1114198.6 High
- foxit esign, foxit software inc. na1.foxitesign.foxit.com +1 moreInsecure Direct Object Reference (IDOR) Leading to Signature Forgery in Foxit eSignCVE-2026-49477.1 High
- foxit pdf editor cloud, foxit software inc. pdfonline.foxit.com +1 moreStored XSS via Create New Layer Field found in Foxit PDF Editor CloudCVE-2026-15926.3 Medium
- foxit pdf editor cloud, foxit software inc. pdfonline.foxit.com +1 moreStored XSS via Attachments Feature in https://pdfonline.foxit.com/CVE-2026-15916.3 Medium
- foxit esign, foxit software inc. na1.foxitesign.foxit.com +1 moreReflected Cross-Site Scripting (XSS) Vulnerability in na1.foxitesign.foxit.com via Unsanitized URL ParametersCVE-2025-665236.1 Medium
- foxit pdf editor cloud, foxit software inc. pdfonline.foxit.com +1 moreFoxit pdfonline.foxit.com Stored Cross-Site Scripting in Digital IDs Common Name FieldCVE-2025-665226.3 Medium
- foxit software inc. pdfonline.foxit.com, foxit pdf editor cloud +1 moreFoxit pdfonline.foxit.com Stored Cross-Site Scripting in Trusted Certificates FeatureCVE-2025-665216.3 Medium
- foxit pdf editor cloud, foxit software inc. pdfonline.foxit.com +1 moreFoxit pdfonline.foxit.com Stored Cross-Site Scripting in Portfolio SVG HandlingCVE-2025-665206.3 Medium
- foxit software inc. pdfonline.foxit.com, foxit pdf editor cloud +1 moreFoxit pdfonline.foxit.com Stored Cross-Site Scripting in Layer Import FunctionalityCVE-2025-665196.3 Medium
- foxit software inc. pdfonline.foxit.com, foxit pdf editor cloud +1 moreFoxit pdfonline.foxit.com Stored Cross-Site Scripting in Page Templates FeatureCVE-2025-665026.3 Medium
- foxit software inc. pdfonline.foxit.com, foxit pdf editor cloud +1 moreFoxit pdfonline.foxit.com Stored Cross-Site Scripting in eSign Predefined Text FeatureCVE-2025-665016.3 Medium
- foxit software inc. webplugins.foxit.com, foxit pdf editor cloud +1 moreFoxit webplugins.foxit.com Stored Cross-Site Scripting via postMessage VulnerabilityCVE-2025-665006.3 Medium