Skip to contentRejetto Hfs vulnerabilities
- rejetto hfs2HFS2 2.4.0 Unauthenticated Denial of Service via Hung Serving ThreadCVE-2026-973628.7 High
- rejetto hfs2HFS2 2.4.0 Unauthenticated Arbitrary File Read/Write via Template EngineCVE-2026-9736010.0 Critical
- rejetto hfs2HFS2 2.4.0 RCE via Multipart Upload Filename Template InjectionCVE-2026-9735910.0 Critical
- rejetto hfsRejetto HFS < 3.2.1 Limited File Disclosure via Path Traversal in lang ParameterCVE-2026-615056.9 Medium
- rejetto hfsRejetto HFS < 3.2.1 Stored XSS via File Names in Basic Web ListingCVE-2026-615045.1 Medium
- rejetto hfsRejetto HFS < 3.2.1 Username Enumeration via Login Response DifferencesCVE-2026-615036.9 Medium
- rejetto hfsRejetto HFS < 3.2.1 Cross-Site Request Forgery via GET RequestsCVE-2026-615025.1 Medium
- rejetto hfsRejetto HFS < 3.2.1 Stored XSS in Admin Log ViewerCVE-2026-615015.3 Medium
- rejetto hfsRejetto HFS < 3.2.1 Session Forgery via Predictable Signing KeyCVE-2026-61500Public exploit9.3 Critical
- rejetto http file server, http file server (hfs) +1 moreThe findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or...CVE-2014-6287In KEVPublic exploitEPSS 99.3%9.8 Critical