Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE

The Hacker News · Monday, 5 October 2026 at 08:09 (2h ago) · Original article ↗

A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck.

The vulnerability in question is CVE-2026-61500 (CVSS score: 9.3), a case of session forgery stemming from the use of a weak pseudo-random number generator (PRNG) that can lead to a predictable key, which an attacker can then use to gain unauthorized access and

You're reading a preview. The full article is published by The Hacker News on their website.

Read the full story on The Hacker News

Security

Google halts open-source bug bounty program amid AI spam surge

Google has now suspended submissions to its Open Source Software Vulnerability Rewards Program (OSS VRP) after being flooded by AI-generated reports. [...]

BleepingComputer 2h ago

Security

New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline

Citrix has released security updates for a high-severity security flaw in NetScaler ADC and Citrix NetScaler Gateway that has been exploited as part of targeted zero-day attacks. The vulnerability, tracked as CVE-2026-88779, carries a CVSS score of 8.7 out of 10.0.…

The Hacker News 4h ago

Security

Citrix patches NetScaler SAML zero-day exploited in attacks

Citrix has released emergency updates for a new NetScaler denial-of-service vulnerability tracked as CVE-2026-88779 that has been exploited in zero-day attacks, with researchers investigating whether it can also be exploited for remote code execution. [...]

BleepingComputer 13h ago

Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE

More Security & Privacy

Google halts open-source bug bounty program amid AI spam surge

New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline

Citrix patches NetScaler SAML zero-day exploited in attacks