CRITICALVulnerability
Global

Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE

·Source: The Hacker News

Updated:

Executive Summary

A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck. The vulnerability in question is CVE-2026-61500 (CVSS score: 9.3), a case of session forgery stemming from the use of a weak pseudo-random number generator (PRNG) that can lead to a predictable key, which an attacker can then use to gain unauthorized access and

Analysis

A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck. The vulnerability in question is CVE-2026-61500 (CVSS score: 9.3), a case of session forgery stemming from the use of a weak pseudo-random number generator (PRNG) that can lead to a predictable key, which an attacker can then use to gain unauthorized access and

Indicators of Compromise (1)

CVE (1)
CVE-2026-61500
NVDMITRE CVE
Source Attribution

Originally published by The Hacker News on Oct 5, 2026.

Related Threats

CRITICALVulnerability

NVD CRITICAL: CVE-2026-105484 — A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230...

A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116. The impacted element is the function firmware_check of the file /cgi-bin/cstecgi.cgi of the component UploadFirmwareFile Handler. Such manipulation of the argument file_name leads to os command injection. The attack may be performed from remote.

CVE-2026-105484
NIST NVD
MEDIUMVulnerability

ANZ completes cross-border tokenised deposit payment with Swift ledger

Australia's ANZ has carried out a live corporate treasury transactions using tokenised deposits and Swift’s blockchain ledger.

Finextra
MEDIUMVulnerability

Anchorage Digital expands global services with Standard Chartered

Digital asset custody services provider Anchorage Digital has formed a partnership with Standard Chartered through which it will offer USD accounts and access to Swift wires, including transfers to and from third parties, to eligible non-US institutional clients.

Finextra