Broken Access Control Vulnerability in Foxit's HTML-to-PDF Conversion Service

CVE-2026-111417

What is CVE-2026-111417?

A broken access control vulnerability has been identified in the Foxit HTML-to-PDF conversion service. This vulnerability arises from the use of a shared token for document submissions, which may allow unauthorized users to access and retrieve documents submitted by others. As a result, sensitive data may be compromised, highlighting the need for rigorous access control mechanisms to safeguard user submissions effectively.

References