Skip to content
OpenAdvisories

Vendor

rejetto

12 known vulnerabilities.

Products

hfs 6 hfs2 3 HTTP File Server 3
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-97360

    HFS2 2.4.0 Unauthenticated Arbitrary File Read/Write via Template Engine

    HFS2 version 2.4.0 and earlier contains an unauthenticated arbitrary file access vulnerability that allows unauthenticated attackers to read, write, append, and delete files anywhere the HFS service account has filesystem access outside the shared folder. Att…

    rejetto hfs2
  • Critical 10.0
    CVE-2026-97359 Scanner template

    HFS2 2.4.0 RCE via Multipart Upload Filename Template Injection

    HFS2 version 2.4.0 and earlier contains a template injection vulnerability in the multipart upload handler that allows unauthenticated attackers to achieve remote code execution by embedding malicious template syntax in a filename. Attackers can craft a filen…

    rejetto hfs2
  • Critical 9.8
    CVE-2026-61500 Public exploit

    Rejetto HFS < 3.2.1 Session Forgery via Predictable Signing Key

    Rejetto HFS 3.0.0 through 3.2.0 derives its session-cookie signing key from the non-cryptographic Math.random() generator and discloses outputs of the same generator to unauthenticated clients during login. A remote attacker can collect a small number of logi…

    rejetto hfs
  • Critical 9.8
    CVE-2024-23692 Exploited · Ransomware Public exploit Scanner template EPSS 99%

    Rejetto HTTP File Server 2.3m Unauthenticated RCE

    Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted H…

    rejetto HTTP File Server
    KEV Jul 9, 2024