{"id":"CVE-2026-77706","kind":"vulnerability","aliases":["CVE-2026-77706"],"related":[],"title":"FileOrbis NextGen FileServer: compressed data flaw lets clients tie up resources","description":"Improper handling of highly compressed data (data amplification) vulnerability in Fileorbis Bilişim Hizmetleri Ticaret Anonim Şirketi FileOrbis NextGen FileServer allows Sustained Client Engagement.\n\nThis issue affects FileOrbis NextGen FileServer: before 12.7.","summary":"FileOrbis NextGen FileServer mishandles highly compressed data, a data amplification flaw, so a small compressed input expands into a large amount of work. An attacker can keep client connections busy and degrade the server, according to the NVD description.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["file-server","fileorbis","other"],"not_affected_if":["version-12.7-or-later"],"how_to_check":"- Check the installed FileOrbis NextGen FileServer version in its admin console or install directory: unknown if the sources do not say where.\n- Confirm whether the server accepts compressed uploads or requests from untrusted clients: unknown if the sources do not say.","fix":"- FileOrbis NextGen FileServer: move to `12.7` or later (the NVD description says the issue affects versions before 12.7).","status":"open","published_at":"2026-11-13T14:18:00+00:00","first_seen_at":"2026-11-13T15:19:49+00:00","triaged_at":"2026-11-13T15:21:26+00:00","updated_at":"2026-11-13T15:21:26+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-11-13T15:21:26Z","model":"claude-haiku-5-5","output":{"fix":"- FileOrbis NextGen FileServer: move to `12.7` or later (the NVD description says the issue affects versions before 12.7).","reach":"unknown","title":"FileOrbis NextGen FileServer: compressed data flaw lets clients tie up resources","impact":"low","summary":"FileOrbis NextGen FileServer mishandles highly compressed data, a data amplification flaw, so a small compressed input expands into a large amount of work. An attacker can keep client connections busy and degrade the server, according to the NVD description.","audience":"businesses","category":"other","nicknames":[],"who_cares":["fileorbis","file-server"],"confidence":0.5,"fix_status":"available","needs_auth":"unknown","worst_case":"Client engagement is sustained, degrading server availability.","analyst_note":"Confirm the trigger path (which endpoint accepts compressed input) and whether it is reachable without authentication; NVD page only.","how_to_check":"- Check the installed FileOrbis NextGen FileServer version in its admin console or install directory: unknown if the sources do not say where.\n- Confirm whether the server accepts compressed uploads or requests from untrusted clients: unknown if the sources do not say.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["version-12.7-or-later"],"who_is_affected":"Organizations running FileOrbis NextGen FileServer before version 12.7 are affected, based on the NVD description. The sources do not describe the exact data path or configuration that triggers the amplification, so reachability from untrusted clients is unknown.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000747,"input_tokens":4569,"output_tokens":580,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-77706':14A,17A '12.7':91C 'accord':56B 'affect':86C 'allow':80C 'amount':42B 'amplif':31B,68C 'anonim':75C 'attack':46B 'bilişim':72C 'busi':51B 'client':8A,49B,82C 'compress':4A,27B,36B,65C 'connect':50B 'cve':12A,15A 'data':5A,28B,30B,66C,67C 'degrad':53B 'descript':60B 'engag':83C 'expand':38B 'file':19B 'file-serv':18B 'fileorbi':1A,21B,22B,71C,77C,87C 'fileserv':3A,24B,79C,89C 'flaw':6A,32B 'handl':62C 'high':26B,64C 'hizmetleri':73C 'improp':61C 'input':37B 'issu':85C 'keep':48B 'larg':41B 'let':7A 'mishandl':25B 'nextgen':2A,23B,78C,88C 'nvd':59B 'resourc':11A 'server':20B,55B 'small':35B 'sustain':81C 'ticaret':74C 'tie':9A 'vulner':69C 'work':44B 'şirketi':76C","nicknames":[],"mitigations":[],"who_affected":"Organizations running FileOrbis NextGen FileServer before version 12.7 are affected, based on the NVD description. The sources do not describe the exact data path or configuration that triggers the amplification, so reachability from untrusted clients is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["fileorbis","fileserver","medium","other"],"campaign_type":null,"search_a":"'-2026':13A,16A '-77706':14A,17A 'client':8A 'compress':4A 'cve':12A,15A 'data':5A 'fileorbi':1A 'fileserv':3A 'flaw':6A 'let':7A 'nextgen':2A 'resourc':11A 'tie':9A","search_b":"'accord':56B 'amount':42B 'amplif':31B 'attack':46B 'busi':51B 'client':49B 'compress':27B,36B 'connect':50B 'data':28B,30B 'degrad':53B 'descript':60B 'expand':38B 'file':19B 'file-serv':18B 'fileorbi':21B,22B 'fileserv':24B 'flaw':32B 'high':26B 'input':37B 'keep':48B 'larg':41B 'mishandl':25B 'nextgen':23B 'nvd':59B 'server':20B,55B 'small':35B 'work':44B","search_c":"'12.7':91C 'affect':86C 'allow':80C 'amplif':68C 'anonim':75C 'bilişim':72C 'client':82C 'compress':65C 'data':66C,67C 'engag':83C 'fileorbi':71C,77C,87C 'fileserv':79C,89C 'handl':62C 'high':64C 'hizmetleri':73C 'improp':61C 'issu':85C 'nextgen':78C,88C 'sustain':81C 'ticaret':74C 'vulner':69C 'şirketi':76C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T14:18:00+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss_by":"iletisim@usom.gov.tr","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-77706","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77706","severity":null,"published_at":"2026-11-13T14:18:00+00:00","modified_at":"2026-11-13T14:18:00+00:00","first_seen_at":"2026-11-13T15:19:49+00:00","fetched_at":"2026-11-13T15:19:49+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}