Exploitation Hits Rejetto HFS Vulnerability Discovered by AI

October 5, 2026 · 8:09 am 3 sources

Image: SecurityWeek

Coverage

Coverage

• Exploitation Hits Rejetto HFS Vulnerability Discovered by AI
  SecurityWeek · October 5, 2026 11:00
  CVE-2026-61500 allows attackers to recover the session-cookie signing key and gain administrative access and RCE. The post Exploitation Hits Rejetto HFS Vulnerability Discovered by AI appeared first on SecurityWeek .
• Rejetto HFS servers now actively scanned for critical RCE flaw
  BleepingComputer · October 5, 2026 20:20
  Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery, account takeover, and remote code execution (RCE). [...]

More coverage

• Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE
  The Hacker News · October 5, 2026 08:09
  A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck. The vulnerability in question is CVE-2026-61500 (CVSS score: 9.3), a case of session forgery stemming from the use of a weak pseudo-random number generator (PRNG)…