CVE-2026-5936 - Vulnerability Analysis

Overview

A server contains a server side request forgery caused by processing attacker-supplied URLs, letting attackers make arbitrary requests to internal or external services, exploit requires crafted URL input.

Severity & Score

Impact

Attackers can make arbitrary requests to internal services, potentially exposing sensitive information and enabling further internal network compromise.

Mitigation

Update to the latest version or apply patches that validate and restrict server-side request destinations.

References

• https://www.foxit.com/support/security-bulletins.html

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner