CVE-2026-76563: HTML Injection in Fileorbis
Published Nov 5, 2026
·Updated
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Fileorbis Informatics Services Trade Inc. Fileorbis allows Using Malicious Files.
This issue affects Fileorbis: before 12.5.4.
Event History
Nov 5, 2026
CVE Published
via MITRE·01:47 PM
Data Sourced
via MITRE·01:47 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What versions need remediation?
Fileorbis versions before 12.5.4 are affected. Upgrade to 12.5.4 or later if available.
2
What does an attacker need to exploit this issue?
The issue is exploitable over the network without prior privileges, but requires user interaction. The vulnerability is associated with using malicious files, so exposure depends on a user handling attacker-supplied content.
3
What is the likely impact if exploitation succeeds?
The disclosed vector indicates low confidentiality and integrity impact, with no availability impact. The CVSS scope is changed, meaning effects may extend beyond the vulnerable component's authorization boundary.