> TritonInfoSec News
Home / Oct 06, 2026 / Story
0
#3 The Hacker News general October 05, 2026 at 08:09 UTC

Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE

By [email protected] (The Hacker News)

AI Summary

CVE-2026-61500 (CVSS 9.3) in Rejetto HTTP File Server is under active exploitation, allowing attackers to predict session-cookie signing keys via a weak PRNG, enabling admin session forgery and remote code execution. VulnCheck confirmed active exploitation attempts, and the flaw was notably discovered by an AI-assisted vulnerability research process. Administrators running Rejetto HFS should patch immediately as internet-wide scanning for this vulnerability is now underway.

Read full article → https://thehackernews.com/2026/10/attackers-target…

Relevance score: 85.0/100

# More from October 06

  1. 1
    Citrix discloses third actively exploited NetScaler zero-day in less than a week CyberScoop
  2. 2
    New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline The Hacker News
  3. 4
    Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes The Hacker News
  4. 5
    Denmark population registry data breach affects 8.8 million people BleepingComputer
  5. 6
    Alleged ShinyHunters Leader Arrested in Jordan SecurityWeek
  6. 7
    Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2 The Hacker News
  7. 8
    Senate Passes Bipartisan Bill to Strengthen Healthcare Cybersecurity SecurityWeek
  8. 9
    Belarusian hacktivists spent two years inside Russian healthcare network, researchers say The Record
  9. 10
    Alleged dev of Ploutus ATM malware appears in US court after arrest BleepingComputer