Is CVE-2026-111417 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-111417 being exploited in the wild.

How severe is CVE-2026-111417?

High severity, with a CVSS score of 7.5, published 29 October 2026.

Is there a fix for CVE-2026-111417?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-111417 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2026-111417?

Check whether you run Foxit HTML-to-PDF conversion service. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-111417: Foxit HTML-to-PDF conversion service broken access control

CVE-2026-111417 · Severity: high · CVSS 7.5 · Published 2026-10-29

Foxit's online HTML-to-PDF conversion service uses a shared token to track submitted documents, allowing any user to access files uploaded by other users. An attacker can exploit this to view and download confidential documents converted by other customers without authorization, causing data exposure.

Vendors: Foxit.

Quick answers

Is CVE-2026-111417 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-111417 being exploited in the wild.
How severe is CVE-2026-111417?: High severity, with a CVSS score of 7.5, published 29 October 2026.
Which products and versions are affected?: Foxit HTML-to-PDF conversion service.
Is there a fix for CVE-2026-111417?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-111417 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2026-111417?: Check whether you run Foxit HTML-to-PDF conversion service. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability stems from a broken access control implementation that reuses a shared token across all conversion requests, failing to properly validate user identity or document ownership. An unauthenticated attacker on the network can directly access conversion results belonging to other users by guessing or manipulating the token. The vulnerability affects the HTML-to-PDF conversion API endpoint in Foxit's online services.

Affected products

Foxit HTML-to-PDF conversion service

Timeline

2026-10-29: disclosed

References

https://www.foxit.com/support/security-bulletins.html

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.