Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE

T2Covered by 1 source · first reported by The Hacker News at 05 Oct, 08:09 UTC

A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck. The vulnerability in question is CVE-2026-61500 (CVSS score: 9.3), a case of session forgery stemming from the use of a weak pseudo-random number generator (PRNG)…