CRITICALVulnerability
Global

Rejetto HFS servers now actively scanned for critical RCE flaw

·Source: BleepingComputer

Updated:

Executive Summary

Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery, account takeover, and remote code execution (RCE). [...]

Analysis

Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery, account takeover, and remote code execution (RCE). [...]

Indicators of Compromise (1)

CVE (1)
CVE-2026-61500
NVDMITRE CVE
Source Attribution

Originally published by BleepingComputer on Oct 5, 2026.

Related Threats

MEDIUMVulnerability

ANZ completes cross-border tokenised deposit payment with Swift ledger

Australia's ANZ has carried out a live corporate treasury transactions using tokenised deposits and Swift’s blockchain ledger.

Finextra
MEDIUMVulnerability

Anchorage Digital expands global services with Standard Chartered

Digital asset custody services provider Anchorage Digital has formed a partnership with Standard Chartered through which it will offer USD accounts and access to Swift wires, including transfers to and from third parties, to eligible non-US institutional clients.

Finextra
MEDIUMVulnerability

CISA to keep cyber pay incentives, but less staff will qualify

Justin Doubleday reports: The Cybersecurity and Infrastructure Security Agency is continuing to offer cyber pay incentives to retain skilled technical staff, but less employees will qualify for the program under revised criteria that ties eligibility to job series and performance ratings. The revised policy has sparked some concern that CISA could lose more staff after... Source

DataBreaches.net