Rejetto vulnerabilities

Products

• Hfs 6
• Http File Server 6
• Hfs2 3
• Http File Server 3

Newest

• rejetto hfs2 HFS2 2.4.0 Unauthenticated Denial of Service via Hung Serving Thread CVE-2026-97362 8.7 HighSeptember 24, 2026
• rejetto hfs2 HFS2 2.4.0 Unauthenticated Arbitrary File Read/Write via Template Engine CVE-2026-97360 10.0 CriticalSeptember 24, 2026
• rejetto hfs2 HFS2 2.4.0 RCE via Multipart Upload Filename Template Injection CVE-2026-97359 10.0 CriticalSeptember 24, 2026
• rejetto hfs Rejetto HFS < 3.2.1 Limited File Disclosure via Path Traversal in lang Parameter CVE-2026-61505 6.9 MediumJuly 13, 2026
• rejetto hfs Rejetto HFS < 3.2.1 Stored XSS via File Names in Basic Web Listing CVE-2026-61504 5.1 MediumJuly 13, 2026
• rejetto hfs Rejetto HFS < 3.2.1 Username Enumeration via Login Response Differences CVE-2026-61503 6.9 MediumJuly 13, 2026
• rejetto hfs Rejetto HFS < 3.2.1 Cross-Site Request Forgery via GET Requests CVE-2026-61502 5.1 MediumJuly 13, 2026
• rejetto hfs Rejetto HFS < 3.2.1 Stored XSS in Admin Log Viewer CVE-2026-61501 5.3 MediumJuly 13, 2026
• rejetto hfs Rejetto HFS < 3.2.1 Session Forgery via Predictable Signing Key CVE-2026-61500 Public exploit 9.3 CriticalJuly 13, 2026
• rejetto http file server rejetto HFS vulnerable to OS Command Execution by remote authenticated users CVE-2024-39943 Public exploitFix available EPSS 39.5% 9.9 CriticalJuly 4, 2024
• rejetto http file server Rejetto HTTP File Server 2.3m Unauthenticated RCE CVE-2024-23692 In KEVPublic exploit EPSS 99.5% 9.8 CriticalMay 31, 2024
• rejetto http file server Multiple vulnerabilities in Rejetto's Http File Server CVE-2024-1227 6.5 MediumMarch 12, 2024
• rejetto http file server Multiple vulnerabilities in Rejetto's Http File Server CVE-2024-1226 7.5 HighMarch 12, 2024
• rejetto http file server rejetto HFS (aka HTTP File Server) v2.3m Build #300, when virtual files or folders are used,... CVE-2020-13432 EPSS 30.9% 7.5 HighJune 8, 2020
• rejetto http file server The file comment feature in Rejetto HTTP File Server (hfs) 2.3c and earlier allows remote... CVE-2014-7226 Public exploit 7.5 HighOctober 10, 2014
• rejetto http file server, http file server (hfs) +1 more The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or... CVE-2014-6287 In KEVPublic exploit EPSS 99.3% 9.8 CriticalOctober 7, 2014