Exploitation Hits Rejetto HFS Vulnerability Discovered by AI

Monday, October 5, 2026 at 11:00 AM UTC·Source: SecurityWeek

Updated: Monday, October 5, 2026 at 11:00 AM UTC

Executive Summary

CVE-2026-61500 allows attackers to recover the session-cookie signing key and gain administrative access and RCE. The post Exploitation Hits Rejetto HFS Vulnerability Discovered by AI appeared first on SecurityWeek .

Analysis

Indicators of Compromise (1)

CVE (1)

CVE-2026-61500

NVD MITRE CVE

Source Attribution

Originally published by SecurityWeek on Oct 5, 2026.

Related Threats

MEDIUMVulnerabilityNEW

Rothera goes live on Smartstream's Air to automate high-volume derivatives reconciliations

Smartstream, the trusted data solutions provider for leading global financial institutions and enterprises, today announced that Rothera, the U.S.-based CFTC-regulated event contract market, has gone live on Smartstream’s Air.

24m agoFinextra

CRITICALVulnerability

NVD CRITICAL: CVE-2026-94293 — An unauthenticated remote attacker can modify Asset Administration Shell submode...

An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints.

CVE-2026-94293

2h agoNIST NVD

CRITICALVulnerability

NVD CRITICAL: CVE-2026-105778 — A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affected by this...

A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the component Wifi Handler. Such manipulation of the argument wifiPwd leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2026-105778