EIP-2026-116728
PRE-CVEAdobe Reader PDF - Client Side Request Injection
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-116728. PoCs published by Alex Inführ.
AI-analyzed exploit summary This is a PDF exploit leveraging XFA (XML Forms Architecture) to trigger an external submission event, potentially leading to arbitrary HTTP requests or data exfiltration. The PoC demonstrates how malformed XFA content can be embedded in a PDF to execute unintended actions when opened.
Description
Adobe Reader PDF - Client Side Request Injection
Exploits (1)
This is a PDF exploit leveraging XFA (XML Forms Architecture) to trigger an external submission event, potentially leading to arbitrary HTTP requests or data exfiltration. The PoC demonstrates how malformed XFA content can be embedded in a PDF to execute unintended actions when opened.