CVE-2026-111419: Hardcoded API Token in Foxit Official Website
A sensitive information exposure vulnerability exists on the Foxit official website because JavaScript code contains third-party authorization information. This may allow unauthorized parties to obtain or misuse the exposed credentials.
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The CVSS vector indicates network access is sufficient, with low attack complexity and no required privileges or user interaction. The exposed authorization information is present in JavaScript served by the website.
What impact is indicated if the exposed credentials are misused?
The reported impact is high confidentiality impact, while integrity and availability impacts are listed as none. The CVSS vector also indicates scope change.
Which deployments or versions can be confirmed as affected?
The available information identifies the Foxit official website but does not provide affected versions, specific JavaScript files, or a remediation status.