#HTTP File Server

Attackers exploit Rejetto HFS flaw that lets them forge admin sessions

CVE-2026-61500 lets an unauthenticated attacker predict HFS session signing keys and take over the admin account. Exploitation was seen on October 1.

3 days ago