CVE-2026-77706 · Other
NO FIX YET · SEE WHAT TO DO
FileOrbis NextGen FileServer mishandles highly compressed data, a data amplification flaw, so a small compressed input expands into a large amount of work. An attacker can keep client connections busy and degrade the server, according to the NVD description.
first public Nov 13, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Organizations running FileOrbis NextGen FileServer before version 12.7 are affected, based on the NVD description. The sources do not describe the exact data path or configuration that triggers the amplification, so reachability from untrusted clients is unknown.
Not affected if version-12.7-or-later
Who cares file-server, fileorbis
12.7 or later (the NVD description says the issue affects versions before 12.7).Improper handling of highly compressed data (data amplification) vulnerability in Fileorbis Bilişim Hizmetleri Ticaret Anonim Şirketi FileOrbis NextGen FileServer allows Sustained Client Engagement.
This issue affects FileOrbis NextGen FileServer: before 12.7.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.