Rejetto HFS servers now actively scanned for a critical RCE flaw

Hackers are actively scanning Rejetto HFS servers for CVE-2026-61500, a vulnerability that can enable session forgery, account takeover, and remote code execution (RCE). VulnCheck honeypots observed small-scale reconnaissance that appeared to originate from a single China Telecom IP address and targeted deployments in Japan and the United States. No details of successful exploitation or post-exploitation activity have been shared.