CERT24Rejetto HFS Flaw Enables Admin Session Forgery and Remote Code ExecutionLoading data…
CERT24Threat Observatory
Period

Rejetto HFS Flaw Enables Admin Session Forgery and Remote Code Execution

A critical vulnerability in Rejetto HTTP File Server (HFS), CVE-2026-61500, is the subject of active exploitation attempts. VulnCheck detected small-scale reconnaissance on October 1, 2026, targeting vulnerable systems in the United States.

← Back to intelligence

Rejetto HFS Flaw Enables Admin Session Forgery and Remote Code Execution

A critical vulnerability in Rejetto HTTP File Server (HFS), CVE-2026-61500, is the subject of active exploitation attempts. VulnCheck detected small-scale reconnaissance on October 1, 2026, targeting vulnerable systems in the United States.