Critical Rejetto HFS Flaw Enables Admin Session Forgery and Remote Code Execution

A critical security vulnerability in Rejetto HTTP File Server is undergoing active exploitation in the wild. CVE-2026-61500 exploits a weak pseudo-random…

If you run Rejetto HFS, apply the security patch immediately — in-the-wild exploitation is already confirmed. Review access logs for unauthorized administrative access attempts. Consider isolating affected servers until patched.