RRejetto

Products

Exploited and recent CVEs

• CVE-2024-23692 Critical 9.8 Exploited Rejetto HTTP File Server 2.3m Unauthenticated RCE 99.5%
• CVE-2026-97362 High 7.5 HFS2 2.4.0 Unauthenticated Denial of Service via Hung Serving Thread 0.3%
• CVE-2026-97360 Critical 10.0 HFS2 2.4.0 Unauthenticated Arbitrary File Read/Write via Template Engine 0.4%
• CVE-2026-97359 Critical 10.0 HFS2 2.4.0 RCE via Multipart Upload Filename Template Injection 5.5%
• CVE-2026-61505 Medium 5.3 Rejetto HFS < 3.2.1 Limited File Disclosure via Path Traversal in lang Parameter 0.5%
• CVE-2026-61504 Medium 5.4 Rejetto HFS < 3.2.1 Stored XSS via File Names in Basic Web Listing 0.2%
• CVE-2026-61503 Medium 5.3 Rejetto HFS < 3.2.1 Username Enumeration via Login Response Differences 0.4%
• CVE-2026-61502 Medium 4.3 Rejetto HFS < 3.2.1 Cross-Site Request Forgery via GET Requests 0.2%
• CVE-2026-61501 Medium 6.1 Rejetto HFS < 3.2.1 Stored XSS in Admin Log Viewer 0.4%
• CVE-2026-61500 Critical 9.8 Rejetto HFS < 3.2.1 Session Forgery via Predictable Signing Key 1.9%
• CVE-2024-1227 Medium 6.5 Multiple vulnerabilities in Rejetto's Http File Server 0.5%
• CVE-2024-1226 High 7.5 Multiple vulnerabilities in Rejetto's Http File Server 0.4%