CVE-2026-76563 · Vendor
NO FIX YET · SEE WHAT TO DO
Fileorbis, a product from Fileorbis Informatics Services Trade Inc., fails to neutralize script-related HTML tags, a basic cross-site scripting flaw. A crafted malicious file can make a user's browser run attacker-supplied script inside the Fileorbis web page.
first public Nov 5, 2026 · 1 source
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Organizations running Fileorbis before version 12.5.4 are affected. The sources do not say which feature or file type is involved, so exposure depends on whether users open files processed by the product in a browser.
Not affected if version-12.5.4-or-later
Who cares fileorbis, web-app
12.5.4 or later (the affected range is before 12.5.4).Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Fileorbis Informatics Services Trade Inc. Fileorbis allows Using Malicious Files.
This issue affects Fileorbis: before 12.5.4.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.