CVE-2026-5936: SSRF in Foxit PDF Services API

The SSRF vulnerability in Foxit PDF Services API presents a significant risk. An attacker can craft malicious URLs that instruct the API to make requests to arbitrary internal or external destinations. This could be leveraged to scan internal networks for open ports and services, access cloud metadata endpoints (potentially exposing credentials), or bypass network segmentation. Successful exploitation could result in sensitive information disclosure, privilege escalation, and further compromise of the affected environment. The ability to probe internal services makes this vulnerability particularly concerning, as it can be used to map the internal network and identify other potential attack vectors.

1. Reserved2026-04-09
2. Published2026-04-13
3. EPSS updated2026-04-20

The primary mitigation for CVE-2026-5936 is to upgrade Foxit PDF Services API to version 2026-04-07 or later. If immediate upgrading is not possible, consider implementing temporary workarounds such as restricting outbound network access for the API to only necessary destinations. Implement strict URL validation and sanitization to prevent attackers from injecting malicious URLs. Consider deploying a Web Application Firewall (WAF) with SSRF protection rules to filter out suspicious requests. Monitor API logs for unusual outbound connections or requests to unexpected destinations.