CVE-2026-77706: Denial of Service via Maliciously Compressed Spreadsheet File in Fileorbis's FileOrbis NextGen FileServer

Q: Which deployments are affected?

FileOrbis NextGen FileServer versions before 12.7 are affected. The provided information does not identify any specific configuration requirement or exception.

Q: What does an attacker need to exploit this issue?

The attacker needs network access and low-level privileges, and can exploit the issue without user interaction. Exploitation involves maliciously compressed spreadsheet data that triggers data amplification and can cause denial of service.

Q: What is the remediation?

Upgrade FileOrbis NextGen FileServer to version 12.7 or later. No alternative mitigations are provided in the available information.

Published Nov 13, 2026

Updated

Improper handling of highly compressed data (data amplification) vulnerability in Fileorbis Bilişim Hizmetleri Ticaret Anonim Şirketi FileOrbis NextGen FileServer allows Sustained Client Engagement.

This issue affects FileOrbis NextGen FileServer: before 12.7.

Affected Software

1 affected component

FileOrbis FileOrbis NextGen FileServer<12.7

Event History

Nov 13, 2026

CVE Published

via MITRE·02:05 PM

Data Sourced

via MITRE·02:05 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are affected?

FileOrbis NextGen FileServer versions before 12.7 are affected. The provided information does not identify any specific configuration requirement or exception.

What does an attacker need to exploit this issue?

The attacker needs network access and low-level privileges, and can exploit the issue without user interaction. Exploitation involves maliciously compressed spreadsheet data that triggers data amplification and can cause denial of service.

What is the remediation?