Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-10-05 08:09 UTC
  • Importiert: 2026-10-10 09:51 UTC
  • CVSS: 9.8
  • Quelle-ID: thn_global
  • uid_hash: 81d159ab0bac620981cbe73b912f10c07b692836a98f01bdc43d2e6ff3c5e2b3
The Hacker News

Inhalt

A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck.

The vulnerability in question is CVE-2026-61500 (CVSS score: 9.3), a case of session forgery stemming from the use of a weak pseudo-random number generator (PRNG) that can lead to a predictable key, which an attacker can then use to gain unauthorized access and

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-61500

CRITICAL

9.8

CRITICAL

9.8

2026-07-13

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

 security_news - de https://feeds.feedburner.com/TheHackersNews
Zurueck zur Eintrags-Liste