CVE-2026-61500Suited to automated attack · CISA
Rejetto HFS < 3.2.1 Session Forgery via Predictable Signing Key
CVSS score
9.3
EPSS probability
%1.0
Risk score
0.1
Published
3 mo ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws
Anthropic on Tuesday said it's expanding a program that allows vetted cybersecurity professionals to test its advanced artificial intelligence (AI) models with reduced safeguards and blocking classifiers, as the company claimed its Project Glasswing initiative uncovered at least 129,000 verified software vulnerabilities between April and July 2026. The company said it also found an additional
Similar Vulnerabilities
9.8
CVE-2024-23692 Actively exploitedRejetto HTTP File Server 2.3m Unauthenticated RCE
Patch verified Public Exploits:14EPSS %99
10.0
CVE-2026-97359HFS2 2.4.0 RCE via Multipart Upload Filename Template Injection
Patch status unknownEPSS %1
10.0
CVE-2026-97360HFS2 2.4.0 Unauthenticated Arbitrary File Read/Write via Template Engine
Patch status unknownEPSS %0
8.7
CVE-2026-97362HFS2 2.4.0 Unauthenticated Denial of Service via Hung Serving Thread
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-61500"