Threats tagged 'ghsa-r64m-2vjm-2m73'

CVE-2026-18597 is a high-severity Server-Side Request Forgery (SSRF) vulnerability in Foxit Software Inc.'s Foxit PDF Services API. The vulnerability arises because the PDF creation feature allows referencing external files and uses URL redirection to bypass local file access restrictions. This flaw can lead to information disclosure. There is no confirmed patch or official remediation available at this time. No known exploits in the wild have been reported.