CVE-2026-111418 is a server-side request forgery (SSRF) vulnerability in Foxit's official website HTML-to-PDF conversion service. The vulnerability arises because the service supports ZIP-formatted input, which can bypass restrictions on requests to internal IP addresses. This may allow an attacker to discover internal network resources. The vulnerability has a CVSS 3.1 score of 7.5, indicating high severity. No known exploits or patches are currently documented.