AX·NEWS
Sign in

Vulnerability

CVE-2026-61500

3 stories · 3 outlets

Official record (cve.org)NVDCVE watch

Impacted if

Not known yet — the vendor's record and the NVD are being read.

First seen by AX-NEWS · latest story . Severity: NVD, or the CVE record while the NVD has not scored it. This product uses data from the NVD API but is not endorsed or certified by the NVD.

Coverage

  1. Rejetto HFS servers now actively scanned for critical RCE flaw
    USBleepingComputer Cybersecurity

    Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery, account takeover, and remote code execution (RCE). [...]

  2. Exploitation Hits Rejetto HFS Vulnerability Discovered by AI 
    USSecurityWeek Cybersecurity

    CVE-2026-61500 allows attackers to recover the session-cookie signing key and gain administrative access and RCE. The post Exploitation Hits Rejetto HFS Vulnerability Discovered by AI appeared first on SecurityWeek .

  3. Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE
    INThe Hacker News Cybersecurity

    A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck. The vulnerability in question is CVE-2026-61500 (CVSS score: 9.3), a case of session forgery stemming…