Fileorbis Informatics Services Trade Inc. vulnerabilities and threats

CVE-2026-76563 is a cross-site scripting (XSS) vulnerability in Fileorbis Informatics Services Trade Inc.'s Fileorbis product. The flaw involves improper neutralization of script-related HTML tags, allowing malicious files to execute scripts in a web page context. This vulnerability affects all versions prior to 12.5.4. It has a CVSS 3.1 base score of 6.1, indicating a medium severity level. No known exploits are reported in the wild. The issue is fixed in version 12.5.4.

CVE-2026-19447 is a stored cross-site scripting (XSS) vulnerability in FileOrbis by Fileorbis Informatics Services Trade Inc. It arises from improper neutralization of input during web page generation. This vulnerability affects versions before 16.5. The CVSS score is 5.4, indicating a medium severity issue.