Exploitation hits Rejetto HFS vulnerability discovered by AI
Threat actors are exploiting a critical vulnerability in the Rejetto HTTP File Server (HFS) to bypass authentication and gain remote code execution (RCE), VulnCheck warns. The flaw is tracked as CVE-2026-61500 (CVSS score of 9.3) and exists because the open source file server passes output from its non-cryptographic session cookie generator to unauthenticated clients during … Read more