What is CVE-2026-18597?

CVE-2026-18597 is a high-severity vulnerability in Foxit Software Inc. Pdf Services Api, classified under Server-Side Request Forgery (SSRF). CVSS score: 8.5/10. Published 2026-08-06.

How severe is CVE-2026-18597?

High severity. CVSS v3 base score is 8.5 out of 10.

SSRF in Foxit Software Inc. Pdf Services Api

CVE-2026-18597

The PDF creation feature of Foxit PDF Services API supports referencing external files. Although local file access is restricted, an attacker could trigger an SSRF vulnerability by using URL redirection to bypass validation, leading to inf…

Vulnerability class: SSRF (Server-Side Request Forgery)

CVSS v3 metric

CVSS v3 base score 8.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N.

Affected products

Foxit Software Inc. Pdf Services Api — versions before 2026-07-27

Weakness classification (CWE)

CWE-918 — Server-Side Request Forgery (SSRF)

References

14984358-7092-470d-8f34-ade47a7658a2

Frequently asked questions

What is CVE-2026-18597?: CVE-2026-18597 is a high-severity vulnerability in Foxit Software Inc. Pdf Services Api, classified under Server-Side Request Forgery (SSRF). CVSS score: 8.5/10. Published 2026-08-06.
How severe is CVE-2026-18597?: High severity. CVSS v3 base score is 8.5 out of 10.