CVE-2026-77706
Received
Received - Intake
Data Amplification Flaw in FileOrbis NextGen FileServer
Vulnerability report for CVE-2026-77706, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-11-13
Last updated on: 2026-11-13
Assigner: Computer Emergency Response Team of the Republic of Turkey
Description
Description
Improper handling of highly compressed data (data amplification) vulnerability in Fileorbis Bilişim Hizmetleri Ticaret Anonim Şirketi FileOrbis NextGen FileServer allows Sustained Client Engagement.
This issue affects FileOrbis NextGen FileServer: before 12.7.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Fileorbis Bilişim Hizmetleri Ticaret Anonim Şirketi | FileOrbis NextGen FileServer | From 0 (inc) to 12.7 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-409 | The product does not handle or incorrectly handles a compressed input with a very high compression ratio that produces a large output. |