{"id":"CVE-2026-76563","kind":"vulnerability","aliases":["CVE-2026-76563"],"related":[],"title":"Fileorbis: stored XSS lets crafted files run scripts in browsers","description":"Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Fileorbis Informatics Services Trade Inc. Fileorbis allows Using Malicious Files.\n\nThis issue affects Fileorbis: before 12.5.4.","summary":"Fileorbis, a product from Fileorbis Informatics Services Trade Inc., fails to neutralize script-related HTML tags, a basic cross-site scripting flaw. A crafted malicious file can make a user's browser run attacker-supplied script inside the Fileorbis web page.","severity":"medium","cvss":6.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["fileorbis","vendor","web-app"],"not_affected_if":["version-12.5.4-or-later"],"how_to_check":"- Check the installed Fileorbis version against the fixed version below.","fix":"- Fileorbis: move to `12.5.4` or later (the affected range is before `12.5.4`).","status":"open","published_at":"2026-11-05T14:17:05+00:00","first_seen_at":"2026-11-05T14:39:18+00:00","triaged_at":"2026-11-05T14:40:29+00:00","updated_at":"2026-11-05T14:40:29+00:00","category":"vendor","confidence":0.55,"triage":{"at":"2026-11-05T14:40:29Z","model":"claude-haiku-5-5","output":{"fix":"- Fileorbis: move to `12.5.4` or later (the affected range is before `12.5.4`).","reach":"unknown","title":"Fileorbis: stored XSS lets crafted files run scripts in browsers","impact":"medium","summary":"Fileorbis, a product from Fileorbis Informatics Services Trade Inc., fails to neutralize script-related HTML tags, a basic cross-site scripting flaw. A crafted malicious file can make a user's browser run attacker-supplied script inside the Fileorbis web page.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["fileorbis","web-app"],"confidence":0.55,"fix_status":"available","needs_auth":"unknown","worst_case":"Attacker script runs in a victim's browser session on the Fileorbis page","analyst_note":"Confirm which Fileorbis feature handles the malicious file input and whether authentication is required; check the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-76563 for the vendor advisory.","how_to_check":"- Check the installed Fileorbis version against the fixed version below.\n- unknown for other checks; the sources do not say which page or feature handles uploaded files.","plain_action":"","needs_analyst":true,"not_affected_if":["version-12.5.4-or-later"],"who_is_affected":"Organizations running Fileorbis before version 12.5.4 are affected. The sources do not say which feature or file type is involved, so exposure depends on whether users open files processed by the product in a browser.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000711,"input_tokens":4226,"output_tokens":577,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-76563':13A,16A '12.5.4':97C 'affect':94C 'allow':88C 'app':21B 'attack':58B 'attacker-suppli':57B 'basic':40B,78C 'browser':10A,55B 'craft':5A,47B 'cross':42B 'cross-sit':41B 'cve':11A,14A 'fail':31B 'file':6A,49B,91C 'fileorbi':1A,17B,22B,26B,63B,82C,87C,95C 'flaw':45B 'html':37B,72C 'improp':66C 'inc':30B,86C 'informat':27B,83C 'insid':61B 'issu':93C 'let':4A 'make':51B 'malici':48B,90C 'neutral':33B,67C 'page':65B,77C 'product':24B 'relat':36B,71C 'run':7A,56B 'script':8A,35B,44B,60B,70C 'script-rel':34B,69C 'servic':28B,84C 'site':43B 'store':2A 'suppli':59B 'tag':38B,73C 'trade':29B,85C 'use':89C 'user':53B 'vendor':18B 'vulner':80C 'web':20B,64B,76C 'web-app':19B 'xss':3A,79C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Fileorbis before version 12.5.4 are affected. The sources do not say which feature or file type is involved, so exposure depends on whether users open files processed by the product in a browser.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["fileorbis","medium","vendor","webapp"],"campaign_type":null,"first_public_at":"2026-11-05T14:17:05+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss_by":"iletisim@usom.gov.tr","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-76563","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76563","severity":null,"published_at":"2026-11-05T14:17:05+00:00","modified_at":"2026-11-05T14:17:05+00:00","first_seen_at":"2026-11-05T14:39:18+00:00","fetched_at":"2026-11-05T14:39:18+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}