Rejetto HFS servers now actively scanned for critical RCE flaw

Hackers are actively scanning for a critical vulnerability in Rejetto HTTP File Server (HFS), tracked as CVE-2026-61500. The flaw involves a weak signing key that enables session forgery, account takeover, and remote code execution (RCE). Active scanning indicates threat actors are probing for vulnerable instances in the wild. Rejetto HFS is a widely used file-sharing server, making this vulnerability particularly impactful. Organizations running HFS servers are urged to patch or mitigate immediately given the active exploitation risk.