🔐 CVE Alert

CVE-2026-19447

MEDIUM 5.4

Stored XSS in Fileorbis Informatics's FileOrbis

CVSS Score
5.4
EPSS Score
0.0%
EPSS Percentile
0th

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fileorbis Informatics Services Trade Inc. FileOrbis allows Stored XSS. This issue affects FileOrbis: before 16.5.

CWE CWE-79
Vendor fileorbis informatics services trade inc.
Product fileorbis
Published Aug 18, 2026
Stay Ahead of the Next One

Get instant alerts for fileorbis informatics services trade inc. fileorbis

Be the first to know when new medium vulnerabilities affecting fileorbis informatics services trade inc. fileorbis are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None

Affected Versions

Fileorbis Informatics Services Trade Inc. / FileOrbis
0 < 16.5

References

NVD ↗ CVE.org ↗ EPSS Data ↗
siberguvenlik.gov.tr: https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0850

Credits

Tahsin Ünlütürk