Cross-Site Scripting Vulnerability in Fileorbis by Fileorbis Informatics Services Trade Inc.
CVE-2026-76563

6.1MEDIUM

Key Information:

Vendor

Fileorbis Informatics Services Trade Inc.

Status
Fileorbis
Vendor
CVE Published:
5 November 2026

What is CVE-2026-76563?

A cross-site scripting (XSS) vulnerability exists in Fileorbis software, which allows attackers to use malicious files that can introduce harmful scripts into web pages. This vulnerability can lead to unauthorized actions being executed in the context of the user’s session, threatening the integrity and confidentiality of potentially sensitive information. Users of Fileorbis versions prior to 12.5.4 are strongly advised to update their software to mitigate the risks associated with this vulnerability.

Affected Version(s)

Fileorbis 0 < 12.5.4

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Merve Hatice ARSLAN
.