{"metadata": {"vulnerability": "CVE-2026-61500", "count": 91, "kinds": {"milestone": 4, "sighting": 73, "kev": 5, "other": 9}}, "data": [{"timestamp": "2026-07-10T15:43:36.625Z", "date_only": false, "value": "2026-07-10T15:43:36.625Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-61500", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-13T00:00:00Z", "date_only": false, "value": "2026-07-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-61500", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-13T17:21:55.747Z", "date_only": false, "value": "2026-07-13T17:21:55.747Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-61500", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-13T18:16:29Z", "date_only": false, "value": "2026-07-13T18:16:29Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-XXRM-3F86-V97J", "record": "GHSA-XXRM-3F86-V97J", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-07-13T18:16:29.903Z", "date_only": false, "value": "2026-07-13T18:16:29.903", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-61500", "record": "FKIE_CVE-2026-61500", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-13T18:30:54Z", "date_only": false, "value": "2026-07-13T18:30:54Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XXRM-3F86-V97J", "record": "GHSA-XXRM-3F86-V97J", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-13T18:30:54Z", "date_only": false, "value": "2026-07-13T18:30:54Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-XXRM-3F86-V97J", "record": "GHSA-XXRM-3F86-V97J", "field": "modified"}, {"timestamp": "2026-07-13T18:42:28.255Z", "date_only": false, "value": "2026-07-13T18:42:28.255156Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqkdtvjdak2l", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "7a311402-63ef-4ae8-bb5e-d79f33ff25fb", "content": "CVE-2026-61500 - Rejetto HFS\nCVE ID : CVE-2026-61500\n \n Published : July 13, 2026, 6:16 p.m. | 17\u00a0minutes ago\n \n Description : Rejetto HFS 3.0.0 through 3.2.0 derives its session-cookie signing key from the non-cryptographic Math.random() generator and discloses outputs of the...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqkdtvjdak2l"}, {"timestamp": "2026-07-13T18:48:06.106Z", "date_only": false, "value": "2026-07-13T18:48:06.106690Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqke5xrwyk2t", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "d466c1a2-f80e-4617-88a9-358fb545c8e9", "content": "CVE-2026-61500\nRejetto HFS, a web file manager, has a security flaw that allows an attacker to steal an administrator's session and take control of the server. This can happen if an attacker observes a few login attempts and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mqke5xrwyk2t"}, {"timestamp": "2026-07-14T03:56:17.939Z", "date_only": false, "value": "2026-07-14T03:56:17.939978Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlcs7si3e2c", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "1893b60a-3251-48a8-b03a-fdea039a5444", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61500 \u0432 Rejetto HFS: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/53C1BA28-0761-4F0E-90A6-E831A73F781D", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlcs7si3e2c"}, {"timestamp": "2026-07-15T14:14:22.207Z", "date_only": false, "value": "2026-07-15T14:14:22.207797Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-61500", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-15T14:14:22.207Z", "date_only": false, "value": "2026-07-15T14:14:22.207797Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-61500", "record": "FKIE_CVE-2026-61500", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-15T14:14:33.696Z", "date_only": false, "value": "2026-07-15T14:14:33.696Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-61500", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-16T08:21:30.630Z", "date_only": false, "value": "2026-07-16T08:21:30.630284Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqskclrmj2i", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "e060ddb8-f4c2-4a4a-bc35-ac00e1825280", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4: \u05e4\u05d2\u05d9\u05e2\u05d4 \u05e7\u05e9\u05d4 \u05d1-Rejetto HFS - CVE-2026-61500 \u05d5\u05de\u05d4 \u05d6\u05d4 \u05d0\u05d5\u05de\u05e8 \u05dc\u05da\n\n\n\nhttps://khesef.xyz/posts/F2980A33-5CF2-47BC-80D4-EA18EDBF4978", "url": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqskclrmj2i"}, {"timestamp": "2026-09-26T16:00:07Z", "date_only": false, "value": "2026-09-26T16:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/103452", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "3628238e-67f5-4433-835c-202bb2e33912", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-61500\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a aramosf\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 15:32:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-61500 Rejetto HFS predictable PRNG session forgery to RCE PoC and Docker lab\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103452", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-26T16:00:07Z", "date_only": false, "value": "2026-09-26T16:00:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/103452", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "5d3a9432-0f88-4d20-bfb1-633ba26b3b9d", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-61500\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a aramosf\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 15:32:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-61500 Rejetto HFS predictable PRNG session forgery to RCE PoC and Docker lab\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103452"}, {"timestamp": "2026-09-26T19:00:17Z", "date_only": false, "value": "2026-09-26T19:00:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/_T5j1lA9AOVmkMwu4zP1aeU9RDM74kzkGN3-79zUkVtT2aE", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "b63bc353-9e8a-43b3-9ddc-61dfb40f28e7", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-26T19:00:17Z", "date_only": false, "value": "2026-09-26T19:00:17.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/_T5j1lA9AOVmkMwu4zP1aeU9RDM74kzkGN3-79zUkVtT2aE", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "9c6d951f-a073-44d7-b154-a45a95320d9f"}, {"timestamp": "2026-09-27T03:00:05Z", "date_only": false, "value": "2026-09-27T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/onhiBlQqnBTPi1kg9_NFU3wTNJ7iOOZvqtDoMRWZzMD4CCA", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "2a0c2361-8c22-4e35-9806-6bffe3186376", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-27T03:00:05Z", "date_only": false, "value": "2026-09-27T03:00:05.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/onhiBlQqnBTPi1kg9_NFU3wTNJ7iOOZvqtDoMRWZzMD4CCA", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "3a701e13-0563-4ea9-a7fb-a233c9dfb94a"}, {"timestamp": "2026-09-30T19:27:28.425Z", "date_only": false, "value": "2026-09-30T19:27:28.425544Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mwr373xhxb22", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "a8eddd20-e432-4871-b532-a397d4291930", "content": "CVE-2026-61500 is trending. Hype score 8, currently #5 on cvemon.\n\nRejetto HFS 3.0.0 through 3.2.0 derives its session-cookie signing key from the non-cryptographic Math.random() generator and discloses outputs of the same generator to\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-61500", "url": "https://bsky.app/profile/cvemon.bsky.social/post/3mwr373xhxb22"}, {"timestamp": "2026-10-01T15:20:09.180Z", "date_only": false, "value": "2026-10-01T15:20:09.180Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-61500", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-01T15:20:09.180Z", "date_only": false, "value": "2026-10-01T15:20:09.180Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-61500", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-03T18:00:11.222Z", "date_only": false, "value": "2026-10-03T18:00:11.222386Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/windowsforum.com/post/3mwyhpqde5o2e", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "b01dc50b-6dc8-4b2d-8747-cee8fa3bf313", "content": "Defender: audit forgotten exclusions. RemoveWindowsAI cleanup can reapply after updates. Intel Arc 32.0.101.9034 beta adds Gears E-Day, with caveats. Patch HFS CVE-2026-61500 to 3.2.1. Members: SEO budgets & Win11 workflows. +26 more stories, 5 new members", "url": "https://bsky.app/profile/windowsforum.com/post/3mwyhpqde5o2e"}, {"timestamp": "2026-10-04T07:01:53.796Z", "date_only": false, "value": "2026-10-04T07:01:53.796589Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/five-oclick-tech.bsky.social/post/3mwztfkeigv2d", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "d4cf4c00-6253-41b1-b07d-d201023e114c", "content": "Anthropic's Mythos found a critical vuln, now exploited \ud83d\udea8\n\nAnthropic's Mythos AI helped uncover a critical authentication-bypass bug (CVE-2026-61500) in Rejetto HTTP File Server (HFS) that allows remote code execution and is already being exploited in the wild.", "url": "https://bsky.app/profile/five-oclick-tech.bsky.social/post/3mwztfkeigv2d"}, {"timestamp": "2026-10-04T22:04:47.515Z", "date_only": false, "value": "2026-10-04T22:04:47.515871Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xlorenzhermes.bsky.social/post/3mx3fu3sdf323", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "a2986d00-5fd4-428c-b7b0-a538de19838b", "content": "This week's CVE-2026-61500: full admin takeover + RCE in Rejetto HFS, a popular Node file server. The whole server trusted one line of JavaScript \u2014 and that line was Math.random():", "url": "https://bsky.app/profile/xlorenzhermes.bsky.social/post/3mx3fu3sdf323"}, {"timestamp": "2026-10-05T07:38:39.771Z", "date_only": false, "value": "2026-10-05T07:38:39.771181Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mx4fwaoq6x2e", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "12cf393d-cb66-4abe-92d9-14eaa978c35d", "content": "Top 3 CVE for last 7 days:\nCVE-2026-88771: 72 interactions\nCVE-2026-88772: 70 interactions\nCVE-2026-104286: 36 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-88779: 23 interactions\nCVE-2026-61500: 4 interactions\nCVE-2026-105123: 3 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mx4fwaoq6x2e"}, {"timestamp": "2026-10-05T08:12:11Z", "date_only": false, "value": "2026-10-05T08:12:11.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/10236", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "d976ca32-8229-4303-af96-e3d97d6d1a0c", "content": "\u26a0\ufe0f Attackers are targeting a Rejetto HFS flaw that enables forged admin sessions and remote code execution.\n\nCVE-2026-61500 affects HFS 3.0.0\u20133.2.0. VulnCheck detected exploitation attempts against vulnerable U.S. hosts after a public PoC was released.\n\nRead - https://thehackernews.com/2026/10/attackers-target-rejetto-hfs-flaw-that.html", "url": "https://t.me/thehackernews/10236", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-05T08:12:11Z", "date_only": false, "value": "2026-10-05T08:12:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/10236", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "82c876c1-a32c-4526-b5b7-640360b202a4", "content": "\u26a0\ufe0f Attackers are targeting a Rejetto HFS flaw that enables forged admin sessions and remote code execution.\n\nCVE-2026-61500 affects HFS 3.0.0\u20133.2.0. VulnCheck detected exploitation attempts against vulnerable U.S. hosts after a public PoC was released.\n\nRead - https://thehackernews.com/2026/10/attackers-target-rejetto-hfs-flaw-that.html", "url": "https://t.me/thehackernews/10236"}, {"timestamp": "2026-10-05T08:32:18Z", "date_only": false, "value": "2026-10-05T08:32:18+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-61500", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "5fbc5d1d-e4ac-4880-b93f-0ecc0c64d0ae", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-05T08:32:18Z", "date_only": false, "value": "2026-10-05T08:32:18+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2026-61500", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "5fbc5d1d-e4ac-4880-b93f-0ecc0c64d0ae", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-05T08:32:18Z", "date_only": false, "value": "2026-10-05T08:32:18+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2026-61500", "field": "status.status_updated_at", "uuid": "5fbc5d1d-e4ac-4880-b93f-0ecc0c64d0ae", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-05T08:32:18.906Z", "date_only": false, "value": "2026-10-05T08:32:18.906Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2026-61500", "field": "evidence.0.details.added_date", "uuid": "5fbc5d1d-e4ac-4880-b93f-0ecc0c64d0ae", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-05T09:31:49.694Z", "date_only": false, "value": "2026-10-05T09:31:49.694264Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mx4malllv42a", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "e0a2354b-8c48-49a1-8e21-8ca9fe2a041e", "content": "CVE-2026-61500 enables session forgery in Rejetto HFS via predictable Math.random() output, allowing unauthorized admin access and remote code execution.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mx4malllv42a"}, {"timestamp": "2026-10-05T09:45:57Z", "date_only": false, "value": "2026-10-05T09:45:57.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberDispatch/3246", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "bc852ba9-afa7-48c2-8dce-8981aabade73", "content": "Attackers are targeting a Rejetto HFS flaw that enables forged admin sessions and remote code execution.\n\nCVE-2026-61500 affects HFS 3.0.0\u20133.2.0. VulnCheck detected exploitation attempts against vulnerable U.S. hosts after a public PoC was released.", "url": "https://t.me/CyberDispatch/3246", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-05T10:16:26.501Z", "date_only": false, "value": "2026-10-05T10:16:26.501066Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mx4oqefuko2c", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "db2b3e63-6d68-447f-ae6a-673563bc8aff", "content": "\ud83e\udd16 CVE-2026-61500 (CVSS 9.3): Rejetto HTTP File Server (HFS) uses a weak PRNG, making the session key predictable. Attackers can forge an admin session and gain RCE. Active exploitation attempts reported by\u2026", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mx4oqefuko2c"}, {"timestamp": "2026-10-05T10:54:05.929Z", "date_only": false, "value": "2026-10-05T10:54:05.929145Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vritrasecnews.bsky.social/post/3mx4qtpo6tk2u", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "846e1458-b10e-4721-90d2-6d4a8f5f2004", "content": "A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck. The vulnerability in question is CVE-2026-61500 (CVSS...\n\n\ud83d\udd17 https://thehackernews.com/2026/10/attackers-target-rejetto-hfs-flaw-that.html", "url": "https://bsky.app/profile/vritrasecnews.bsky.social/post/3mx4qtpo6tk2u"}, {"timestamp": "2026-10-05T11:03:27.598Z", "date_only": false, "value": "2026-10-05T11:03:27.598664Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/117387965708570386", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "210a2f36-5710-4f50-bdd1-8f52872551e1", "content": "Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE\nA critical Rejetto HTTP File Server flaw (CVE-2026-61500, CVSS 9.3) is seeing active exploitation attempts, according to VulnCheck. The session-forgery bug stems from a weak pseudo-random number generator producing predictable keys, letting attackers gain unauthorized access and potentially achieve remote code execution. https://thehackernews.com/2026/10/attackers-target-rejetto-hfs-flaw-that.html", "url": "https://infosec.exchange/users/edwardk/statuses/117387965708570386"}, {"timestamp": "2026-10-05T11:03:29.068Z", "date_only": false, "value": "2026-10-05T11:03:29.068423Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mx4rei626i2m", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "63a2a8f6-787d-4cef-808d-e2e11155dbab", "content": "Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE\n\nA critical Rejetto HTTP File Server flaw (CVE-2026-61500, CVSS 9.3) is seeing active exploitation attempts, according to VulnCheck. The session-fo... https://threatintel.cc/2026/10/05/attackers-target-rejetto-hfs-flaw.html", "url": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mx4rei626i2m"}, {"timestamp": "2026-10-05T11:06:16.369Z", "date_only": false, "value": "2026-10-05T11:06:16.369003Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mx4rjib4pa2q", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "c0ad3d3b-9542-4471-9ebf-ef18e1852b5c", "content": "AI\u304c\u767a\u898b\u3057\u305fRejetto HFS\u306e\u8106\u5f31\u6027\u3001\u60aa\u7528\u304c\u59cb\u307e\u308b\n\nVulnCheck\u306f\u3001\u653b\u6483\u8005\u304cRejetto HTTP File Server(HFS)\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3001\u8a8d\u8a3c\u3092\u56de\u907f\u3057\u3066\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c(RCE)\u306b\u81f3\u3063\u3066\u3044\u308b\u3068\u8b66\u544a\u3057\u3066\u3044\u307e\u3059\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u300cCVE-2026-61500\u300d(CVSS\u30b9\u30b3\u30a29.3)\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u306e\u30d5\u30a1\u30a4\u30eb\u30b5\u30fc\u30d0\u3067\u3042\u308bHF", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mx4rjib4pa2q"}, {"timestamp": "2026-10-05T11:14:05.741Z", "date_only": false, "value": "2026-10-05T11:14:05.741974Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mx4rxhk5ia2j", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "c972e247-b3ff-4bb1-97db-6ddee4a62eeb", "content": "CVE-2026-61500 in Rejetto HFS enables authentication bypass and remote code execution by leaking session-cookie signing material and allowing forged admin cookies.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mx4rxhk5ia2j"}, {"timestamp": "2026-10-05T11:18:06Z", "date_only": false, "value": "2026-10-05T11:18:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/information_security_channel/56043", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "a4ba7095-126c-4285-b2c9-ddfb35810281", "content": "Exploitation Hits Rejetto HFS Vulnerability Discovered by AI\u00a0\nhttps://www.securityweek.com/exploitation-hits-rejetto-hfs-vulnerability-discovered-by-ai/\n\nCVE-2026-61500 allows attackers to recover the session-cookie signing key and gain administrative access and RCE.\nThe post Exploitation Hits Rejetto HFS Vulnerability Discovered by AI\u00a0 (https://www.securityweek.com/exploitation-hits-rejetto-hfs-vulnerability-discovered-by-ai/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/56043"}, {"timestamp": "2026-10-05T11:18:23.573Z", "date_only": false, "value": "2026-10-05T11:18:23.573041Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mx4s75ujtv2p", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "48cb8c51-83b7-4894-9ce8-d5345385daa7", "content": "Attackers are gleefully exploiting CVE-2026-61500 in Rejetto HFS to steal session keys and execute remote code. Just another Tuesday where clever tools make our lives worse.\n\n#patchfatigue #herewegoagain", "url": "https://bsky.app/profile/cerberusit.bsky.social/post/3mx4s75ujtv2p"}, {"timestamp": "2026-10-05T11:30:26.757Z", "date_only": false, "value": "2026-10-05T11:30:26.757413Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sipirtu.com/post/3mx4suorfgk2i", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "a8b8a233-988f-4edd-be1b-7d02d5b6b004", "content": "CVE-2026-61500 enables attackers to recover the session-cookie signing key, obtain administrative access and execute code remotely on Rejetto HFS.\n\nSource: SecurityWeek", "url": "https://bsky.app/profile/sipirtu.com/post/3mx4suorfgk2i"}, {"timestamp": "2026-10-05T11:31:15.881Z", "date_only": false, "value": "2026-10-05T11:31:15.881642Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kelvinsecteam.bsky.social/post/3mx4sw675d22y", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "4785ce90-c7d5-48df-913d-d80955e243fd", "content": "Exploitation hits Rejetto HFS vulnerability discovered by AI, per SecurityWeek. CVE-2026-61500 allows attackers to recover the session-cookie signing key and gain administrative access and RCE. Continuous configuration auditing remains essential.", "url": "https://bsky.app/profile/kelvinsecteam.bsky.social/post/3mx4sw675d22y"}, {"timestamp": "2026-10-05T11:42:02.208Z", "date_only": false, "value": "2026-10-05T11:42:02.208549Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mx4tjgirhe23", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "86284170-b682-4e98-a548-b1e6f16e7276", "content": "Attackers are actively targeting Rejetto HTTP File Server flaw CVE-2026-61500 to forge admin sessions and execute code. What a joyous development for anyone who enjoys sleeping.\n\n#itsupporthell #neverendingit", "url": "https://bsky.app/profile/cerberusit.bsky.social/post/3mx4tjgirhe23"}, {"timestamp": "2026-10-05T11:42:04.810Z", "date_only": false, "value": "2026-10-05T11:42:04.810391Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mx4tjiudms2n", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "a08114ec-985a-4982-bb2b-4044606df729", "content": "Here we go again, as VulnCheck reports threat actors actively having a field day with CVE-2026-61500 in Rejetto HTTP File Server. This delightful critical mess boasts a 9.3 severity rating, generously offering attackers administrative session forgery and full remote code executio...\n\nRead full story", "url": "https://bsky.app/profile/cerberusit.bsky.social/post/3mx4tjiudms2n"}, {"timestamp": "2026-10-05T12:01:33.780Z", "date_only": false, "value": "2026-10-05T12:01:33.780841Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mx4umdqgfm22", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "2c575638-e0a1-4dd1-b0fb-358aba29db1e", "content": "Rejetto HFS CVE-2026-61500\u3001\u7ba1\u7406\u8005\u30bb\u30c3\u30b7\u30e7\u30f3\u507d\u9020\u3067RCE\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\n\nRejetto HFS \u306e CVE-2026-61500 \u304c\u516c\u958b PoC \u306b\u3088\u308a\u60aa\u7528\u958b\u59cb\u3002\u653b\u6483\u8005\u306f\u7ba1\u7406\u8005\u30bb\u30c3\u30b7\u30e7\u30f3\u3092\u507d\u9020\u3057\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u3002\u516c\u958b\u5f8c\u306e\u5229\u7528\u3092\u60f3\u5b9a\u3057\u3001\u65e9\u6025\u306a\u5bfe\u5fdc\u304c\u5fc5\u8981\u3002\n\n#\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9 #CVE #\u8106\u5f31\u6027", "url": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mx4umdqgfm22"}, {"timestamp": "2026-10-05T12:37:47Z", "date_only": false, "value": "2026-10-05T12:37:47.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/jV4cKxMukVrVmscl6gTql1X009w8LG36zfO8UnV7aWGuug", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "0535ac16-f7a3-4dcd-99da-3cb786320d05", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-05T12:37:47Z", "date_only": false, "value": "2026-10-05T12:37:47.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/jV4cKxMukVrVmscl6gTql1X009w8LG36zfO8UnV7aWGuug", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "7cbfc369-7797-425b-a636-10b13a3f192b"}, {"timestamp": "2026-10-05T14:24:26.230Z", "date_only": false, "value": "2026-10-05T14:24:26.230849Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117388755208769360", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "5f7665bd-77f4-4641-8bf9-7dbd592b69f1", "content": "\ud83d\udcf0 Attackers Actively Exploit Critical RCE Flaw in Rejetto HFS\nCritical RCE flaw in Rejetto HFS (CVE-2026-61500, CVSS 9.3) is under active attack. A weak RNG allows attackers to forge admin cookies. A Chinese threat actor is targeting US servers. Patch to HFS version 3.2.1 now! #RCE #Vulnerability #CyberAttack\n\ud83d\udd17 https://cyber.netsecops.io/articles/attackers-exploit-critical-rejetto-hfs-flaw-for-rce/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "url": "https://mastodon.social/ap/users/115426718704364579/statuses/117388755208769360"}, {"timestamp": "2026-10-05T14:24:41.170Z", "date_only": false, "value": "2026-10-05T14:24:41.170354Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mx54mbhasz25", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "19b9c4fe-dc41-489a-8b24-35beaa540969", "content": "Critical RCE flaw in Rejetto HFS (CVE-2026-61500, CVSS 9.3) is under active attack. A weak RNG allows attackers to forge admin cookies. A Chinese threat actor is targeting US servers. Patch to HFS version 3.2.1 now! #RCE #Vulnerability #CyberAttack\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "url": "https://bsky.app/profile/netsecio.bsky.social/post/3mx54mbhasz25"}, {"timestamp": "2026-10-05T14:37:04Z", "date_only": false, "value": "2026-10-05T14:37:04.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/pphm_HackerNews/3444", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "c6a8dbfc-22d5-4aa5-bf26-33e7bc4fc5ce", "content": "\ud83d\udd34 Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE\n\nA critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck.\n\nThe vulnerability in question is CVE-2026-61500 (CVSS score: 9.3), a case of session forgery stemming from the use of a weak pseudo-random number generator (PRNG) that can lead to a predictable key, which an attacker can then use to gain unauthorized access and seize control of affected systems.\n\n\"Rejetto HFS 3.0.0 through 3.2.0 derives its session-cookie signing key from the non-cryptographic Math.random() generator and discloses outputs of the same generator to unauthenticated clients during login,\" according to an advisory for the flaw.", "url": "https://t.me/pphm_HackerNews/3444", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-05T14:37:04Z", "date_only": false, "value": "2026-10-05T14:37:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/3444", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "ac3e3c45-f0fc-4ebc-a018-35185adf2dd1", "content": "\ud83d\udd34 Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE\n\nA critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck.\n\nThe vulnerability in question is CVE-2026-61500 (CVSS score: 9.3), a case of session forgery stemming from the use of a weak pseudo-random number generator (PRNG) that can lead to a predictable key, which an attacker can then use to gain unauthorized access and seize control of affected systems.\n\n\"Rejetto HFS 3.0.0 through 3.2.0 derives its session-cookie signing key from the non-cryptographic Math.random() generator and discloses outputs of the same generator to unauthenticated clients during login,\" according to an advisory for the flaw.", "url": "https://t.me/pphm_HackerNews/3444"}, {"timestamp": "2026-10-05T16:12:47.023Z", "date_only": false, "value": "2026-10-05T16:12:47.023758Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mx5cnl3gsn2o", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "c47d4f67-a5c6-4d98-a040-d9319fc00bfa", "content": "Rejetto HFS CVE-2026-61500 (CVSS 9.3): predictable session keys let attackers forge admin cookies and run code. VulnCheck saw exploitation from 1 Oct, a day after disclosure. Upgrade HFS 3.0.0-3.2.0 to 3.2.1 now. https://cti.securitycyber.uk", "url": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mx5cnl3gsn2o"}, {"timestamp": "2026-10-05T19:20:09.155Z", "date_only": false, "value": "2026-10-05T19:20:09.155750Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-e5eccbf4-4a2fb0343382a7b3", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "27047cf3-1020-4768-b818-f4ddef7dce05", "content": "AI-assisted research uncovered a critical Rejetto HFS flaw that enables authentication bypass and remote code execution, now exploited in the wild. A Rejetto HFS vulnerability, tracked as CVE-2026-61500 (CVSS score of 9.3), discovered with the help of the Anthropic Mythos AI model is now being exploited in the wild, turning an interesting security research experiment [\u2026]Anthropic Mythos Found A Bug in Rejetto HFS. Attackers Are Now Exploiting It. - Security Affairs", "url": "https://poliverso.org/objects/0477a01e-e5eccbf4-4a2fb0343382a7b3"}, {"timestamp": "2026-10-05T19:20:26.868Z", "date_only": false, "value": "2026-10-05T19:20:26.868206Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mx5n4ytlysb2", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "b6c5b592-bf99-4c8c-a0dc-2a5a51b9f5af", "content": "AI-assisted research uncovered a critical Rejetto HFS flaw that enables authentication bypass and remote code execution, now exploited in the wild. A Rejetto HFS vulnerability, tracked as CVE-2026-61500 (CVSS score of 9.3), discovered with the help of the Anthropic Mythos AI model is now being [\u2026]", "url": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mx5n4ytlysb2"}, {"timestamp": "2026-10-05T20:07:16.772Z", "date_only": false, "value": "2026-10-05T20:07:16.772601Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ai-ru.at.thenote.app/post/3mx5pquuhqs24", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "f74fa495-2bd8-4339-94b4-14f8784bcec9", "content": "\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Rejetto HFS, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0418\u0418\n\nCVE-2026-61500 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043a\u043b\u044e\u0447 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u043e\u0433\u043e cookie \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430.\n\nTelegram \u0418\u0418 \u0414\u0430\u0439\u0434\u0436\u0435\u0441\u0442\n#ai #news", "url": "https://bsky.app/profile/ai-ru.at.thenote.app/post/3mx5pquuhqs24"}, {"timestamp": "2026-10-05T20:20:30.831Z", "date_only": false, "value": "2026-10-05T20:20:30.831853Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mx5qikc2b62b", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "ae8319ce-a7ee-4a3e-afac-a5a2dd7430ed", "content": "Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery, account takeover, and remote code execution (RCE).", "url": "https://bsky.app/profile/bleepingcomputer.com/post/3mx5qikc2b62b"}, {"timestamp": "2026-10-05T20:20:45.787Z", "date_only": false, "value": "2026-10-05T20:20:45.787945Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ai-news.at.thenote.app/post/3mx5qiy7pz224", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "d1b80d60-61cd-4d9a-905f-af309aa5e3bd", "content": "Exploitation Hits Rejetto HFS Vulnerability Discovered by AI\n\nCVE-2026-61500 allows attackers to recover the session-cookie signing key and gain administrative access and RCE.\n\nTelegram AI Digest\n#ai #news", "url": "https://bsky.app/profile/ai-news.at.thenote.app/post/3mx5qiy7pz224"}, {"timestamp": "2026-10-05T20:24:54.161Z", "date_only": false, "value": "2026-10-05T20:24:54.161142Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mx5qqfiaza2l", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "7e630c6d-3ae1-45b9-b847-d721a30fae49", "content": "\ud83e\udd16 CVE-2026-61500: Rejetto HFS 3.0.0\u20133.2.0 signs session cookies with Math.random(), leaking PRNG output at login \u2192 admin cookie forgery + RCE. PoC out, scanning seen. Fix: 3.2.1+.\nhttps://www.bleepingcomputer.com/news/security/rejetto-hfs-servers-now-actively-scanned-for-critical-rce-flaw/", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mx5qqfiaza2l"}, {"timestamp": "2026-10-05T20:30:26.367Z", "date_only": false, "value": "2026-10-05T20:30:26.367542Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/yasna.io/post/3mx5r2bu3ra2l", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "ca9c157c-d38b-47e7-9683-425606d5bfa9", "content": "A critical Rejetto HFS vulnerability (CVE-2026-61500) enabling remote code execution and session forgery is actively exploited, risking unauthorized server access.\n\n#CVE #Flaw #infosec\n\nFull synthesis & sources: yasna.io", "url": "https://bsky.app/profile/yasna.io/post/3mx5r2bu3ra2l"}, {"timestamp": "2026-10-05T20:31:06.714Z", "date_only": false, "value": "2026-10-05T20:31:06.714067Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mx5r3irita25", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "5e3785af-ad3e-4f99-8022-737afc7457e8", "content": "Rejetto HFS\u30b5\u30fc\u30d0\u30fc\u306b\u5bfe\u3057\u3001\u91cd\u5927\u306aRCE\u8106\u5f31\u6027\u3092\u72d9\u3063\u305f\u30b9\u30ad\u30e3\u30f3\u304c\u6d3b\u767a\u5316\n\n\u30cf\u30c3\u30ab\u30fc\u304c\u3001Rejetto HFS\u306e\u7f72\u540d\u9375\u306e\u8106\u5f31\u6027\u300cCVE-2026-61500\u300d\u3092\u72d9\u3063\u3066\u6d3b\u767a\u306b\u30b9\u30ad\u30e3\u30f3\u3092\u884c\u3063\u3066\u3044\u307e\u3059\u3002\u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3055\u308c\u308b\u3068\u3001\u30bb\u30c3\u30b7\u30e7\u30f3\u306e\u507d\u9020\u3001\u30a2\u30ab\u30a6\u30f3\u30c8\u4e57\u3063\u53d6\u308a\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09\u306b\u3064\u306a\u304c\u308b\u6050\u308c\u304c\u3042\u308a\u307e\u3059\u3002 VulnCheck\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30ea\u30b5\u30fc\u30c1\u62c5\u5f53\u30d0\u30a4\u30b9\u30d7\u30ec\u30b8\u30c7\u30f3\u30c8\u3067\u3042\u308bCaitl", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mx5r3irita25"}, {"timestamp": "2026-10-05T20:33:48Z", "date_only": false, "value": "2026-10-05T20:33:48.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/25728", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "d634d6f9-ca40-491f-b252-b34893b3b677", "content": "\u200aRejetto HFS servers now actively scanned for critical RCE flaw\n\nHackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery, account takeover, and remote code execution (RCE). [...]\n\nhttps://www.bleepingcomputer.com/news/security/rejetto-hfs-servers-now-actively-scanned-for-critical-rce-flaw/", "url": "https://t.me/BleepingComputer/25728", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-05T21:48:32.448Z", "date_only": false, "value": "2026-10-05T21:48:32.448759Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tp-security.bsky.social/post/3mx5vfvzbcc2x", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "2b2e1728-39e1-4eed-9ded-d5a130250c1d", "content": "Attackers are targeting Rejetto HFS CVE-2026-61500 (CVSS 9.3): a weak session key lets them forge admin sessions and reach RCE. Upgrade to 3.2.1+.\n\nAlso new: an out-of-band Exchange fix and a critical Dell System Update flaw.\n\nFull update: tp-security.com/news/hourly-...", "url": "https://bsky.app/profile/tp-security.bsky.social/post/3mx5vfvzbcc2x"}, {"timestamp": "2026-10-05T22:15:48.716Z", "date_only": false, "value": "2026-10-05T22:15:48.716013Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mx5wwp2n442x", "record": "cve-2026-61500", "field": "creation_timestamp", "uuid": "d71fe0d8-3ac6-4922-8ebc-912587d758f5", "content": "Rejetto HFS (CVE-2026-61500, CVSS 9.8) is under active exploitation. Attackers recover the session-signing key, forge admin sessions, and achieve RCE. #infosec https://0daynews.com/articles/2026-10-05-rejetto-hfs-cve-2026-61500-rce-active-exploitation/", "url": "https://bsky.app/profile/0daynews.bsky.social/post/3mx5wwp2n442x"}, {"timestamp": "2026-10-05T23:00:44Z", "date_only": false, "value": "2026-10-05T23:00:44.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/VulnerabilityNews/44757", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "72cce59d-9b98-4389-9a76-96b5ba54d4e4", "content": "Rejetto HFS servers now actively scanned for critical RCE flaw\n\nHackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery, account takeover, and remote code execution (RCE). [...]\nhttps://www.bleepingcomputer.com/news/security/rejetto-hfs-servers-now-actively-scanned-for-critical-rce-flaw/", "url": "https://t.me/VulnerabilityNews/44757", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-05T23:00:44Z", "date_only": false, "value": "2026-10-05T23:00:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/VulnerabilityNews/44757", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "7c9905ba-dc97-418e-803f-f973eeb8f46b", "content": "Rejetto HFS servers now actively scanned for critical RCE flaw\n\nHackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery, account takeover, and remote code execution (RCE). [...]\nhttps://www.bleepingcomputer.com/news/security/rejetto-hfs-servers-now-actively-scanned-for-critical-rce-flaw/", "url": "https://t.me/VulnerabilityNews/44757"}, {"timestamp": "2026-10-05T23:01:01Z", "date_only": false, "value": "2026-10-05T23:01:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/VulnerabilityNews/44770", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "330802ee-aab6-4b9d-94f2-c126cb3040ff", "content": "Exploitation Hits Rejetto HFS Vulnerability Discovered by AI\u00a0\n\nCVE-2026-61500 allows attackers to recover the session-cookie signing key and gain administrative access and RCE.\nThe post Exploitation Hits Rejetto HFS Vulnerability Discovered by AI\u00a0 appeared first on SecurityWeek.\nhttps://www.securityweek.com/exploitation-hits-rejetto-hfs-vulnerability-discovered-by-ai/", "url": "https://t.me/VulnerabilityNews/44770"}, {"timestamp": "2026-10-05T23:45:25.693Z", "date_only": false, "value": "2026-10-05T23:45:25.693900Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mx63wxf43h2w", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "63de9b5a-9730-4c52-a9ca-073fefec62b7", "content": "Active scanning targets CVE-2026-61500 in Rejetto HFS, where weak session-cookie signing can enable session forgery, account takeover, and RCE. Probes were seen from China Telecom IPs. #RejettoHFS #China #CVE202661500", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mx63wxf43h2w"}, {"timestamp": "2026-10-06T01:28:30.700Z", "date_only": false, "value": "2026-10-06T01:28:30.700077Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mx6bpb5zjs24", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "55f86259-57ac-4274-82f9-56d18af51a78", "content": "Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE\n\nA critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck.\n\nThe vulnerability in question is CVE-2026-61500 (CVSS score: 9.3), a\u2026\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mx6bpb5zjs24"}, {"timestamp": "2026-10-06T05:45:34.578Z", "date_only": false, "value": "2026-10-06T05:45:34.578000Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tsukumomei.bsky.social/post/3mx6q2wo7px2z", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "98befc96-e54d-49b0-9e91-87595af1d4f5", "content": "\u671d\u306e\u76f8\u5834\u30b9\u30ad\u30e3\u30f3\u4e2d\u306b\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u95a2\u9023\u306e\u30d5\u30a3\u30fc\u30c9\u3067\u300c\u30cf\u30c3\u30ad\u30f3\u30b0\u300d\u3068\u3044\u3046\u30ad\u30fc\u30ef\u30fc\u30c9\u304c\u8996\u754c\u306b\u5165\u3063\u3066\u304d\u3066\u3001\u3053\u308c\u306f\u305f\u3060\u306eIT\u30cb\u30e5\u30fc\u30b9\u3067\u306f\u306a\u304f\u6697\u53f7\u8cc7\u7523\u5e02\u5834\u306b\u6ce2\u53ca\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3068\u76f4\u611f\u3057\u3066\u6df1\u6398\u308a\u3057\u3066\u307f\u305f\u306e\u3067\u3059\u3002\n\u691c\u7d22\u7d50\u679c\u3092\u78ba\u8a8d\u3059\u308b\u3068\u3001Rejetto HTTP File Server (HFS) \u306e\u8106\u5f31\u6027 CVE-2026-61500 \u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3044\u3046\u5831\u544a\u304c\u6d6e\u4e0a\u3057\u3066\u3044\u305f\u306e\u3067\u3059\u3002", "url": "https://bsky.app/profile/tsukumomei.bsky.social/post/3mx6q2wo7px2z"}, {"timestamp": "2026-10-06T05:55:58.509Z", "date_only": false, "value": "2026-10-06T05:55:58.509963Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mx6qnjgndt2l", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "ebed7898-cee5-441c-9503-f751c9f5273c", "content": "3/ Faille RCE critique (CVE-2026-61500) dans Rejetto HFS, activement scann\u00e9e \u00e0 grande \u00e9chelle.\nhttps://www.bleepingcomputer.com/news/security/rejetto-hfs-servers-now-actively-scanned-for-critical-rce-flaw/", "url": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mx6qnjgndt2l"}, {"timestamp": "2026-10-06T08:39:09.263Z", "date_only": false, "value": "2026-10-06T08:39:09.263064Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/suriq.io/post/3mx6zrdbgyl2x", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "e54d130f-0eb3-4d1b-9251-c6dd02d4eab6", "content": "\u26a0\ufe0f PATCH NOW\n\nRejetto HFS, the self-hosted file server, has a critical flaw (CVE-2026-61500): attackers forge an admin session and run code, no login.\n\nScanning started within 48 hours of the public exploit.\n\nFix: upgrade to 3.3.4.", "url": "https://bsky.app/profile/suriq.io/post/3mx6zrdbgyl2x"}, {"timestamp": "2026-10-06T08:55:58Z", "date_only": false, "value": "2026-10-06T08:55:58.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/8680", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "eff8380d-ab75-4deb-8c64-ae12e54ef79d", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043b\u043e \u043a \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043b\u0430\u0431\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0432 Rejetto HFS (CVE-2026-61500), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u0441\u0435\u0441\u0441\u0438\u0438, \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c RCE.\n\n\u041e\u0431 \u044d\u0442\u043e\u043c \u0432 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 VulnCheck \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u044b Canary Intelligence \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0432\u0437\u043b\u043e\u043c\u0430, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435  \u043d\u0430 CVE-2026-61500.\n\n\u041d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043c\u0435\u043b\u043a\u043e\u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u0443\u044e \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443 \u0441 \u043e\u0434\u043d\u043e\u0433\u043e IP China Telecom, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0430 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u0432 \u042f\u043f\u043e\u043d\u0438\u0438 \u0438 \u0421\u0428\u0410.\n\nRejetto HFS (HTTP File Server) - \u044d\u0442\u043e \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u043e\u0431\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u043d\u0430 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Windows, Linux \u0438 macOS.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, CVE-2026-61500 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0431\u044b\u043b\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 13 \u0438\u044e\u043b\u044f 2026 \u0433\u043e\u0434\u0430 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0430 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u0443\u0442\u0435\u0447\u043a\u043e\u0439 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u0438\u0438 \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u044b\u0445 cookie, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 Rejetto HFS 3.2.1.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 3.0.0\u20133.2.0 \u043a\u043b\u044e\u0447 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u043e\u0433\u043e cookie-\u0444\u0430\u0439\u043b\u0430 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442\u0441\u044f \u0438\u0437 \u043d\u0435\u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430 Math.random() \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0440\u0430\u0431\u043e\u0442\u044b \u044d\u0442\u043e\u0433\u043e \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0431\u0440\u0430\u0442\u044c \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043e\u0442\u0432\u0435\u0442\u043e\u0432 \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043b\u044e\u0447 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0438 \u043f\u043e\u0434\u0434\u0435\u043b\u0430\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 cookie-\u0444\u0430\u0439\u043b \u0441\u0435\u0441\u0441\u0438\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u043f\u043e\u043b\u043d\u043e\u043c\u0443 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 server_code.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Horizon3 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f Mythos \u043e\u0442 Anthropic, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043a\u0430\u043a \u0441\u043b\u0430\u0431\u0443\u044e \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u044e \u043a\u043b\u044e\u0447\u0430 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u0442\u0430\u043a \u0438 \u0443\u0442\u0435\u0447\u043a\u0443, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0443\u044e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043a\u043b\u044e\u0447. \u0412\u044b\u0432\u043e\u0434\u044b \u0438 PoC \u0438\u0437\u043b\u043e\u0436\u0438\u043b\u0438 \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 \u043e\u0442 30 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2026 \u0433\u043e\u0434\u0430.\n\nMythos \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0432\u044b\u044f\u0432\u0438\u043b \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e \u2013 \u043e\u043d \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u043d\u0435\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0435 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 Math.random() \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0443\u0447\u0430\u0441\u0442\u043e\u043a \u043a\u043e\u0434\u0430, \u0440\u0430\u0441\u043f\u043e\u0437\u043d\u0430\u043b \u044d\u0442\u0438 \u0434\u0432\u0430 \u0444\u0430\u043a\u0442\u0430 \u043a\u0430\u043a \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u043b, \u0447\u0442\u043e \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u0438\u043c\u0435\u043d\u043d\u043e \u043a \u0442\u0435\u043c \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b \u0434\u043b\u044f \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0433\u043b\u044f\u0434\u043d\u043e \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442, \u0447\u0442\u043e \u044d\u0442\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u0442\u044c \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u0432 HFS \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0433\u043e JavaScript \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0418 \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u044d\u0442\u0438\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0441\u043b\u0443\u0436\u0438\u043b\u0430 \u0442\u0440\u0438\u0433\u0433\u0435\u0440\u043e\u043c \u0434\u043b\u044f \u043d\u0430\u0447\u0430\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2026-61500 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435\u043c.\n\n\u041f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0430\u0442\u0430\u043a\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432 \u0441\u0435\u0431\u044f \u0434\u043e\u0441\u0442\u0443\u043f, \u043a\u0440\u0430\u0436\u0443 \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 HFS, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0445\u043e\u0441\u0442\u0430 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 VulnCheck \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043a\u0430\u043a \u043f\u043e \u0447\u0430\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0442\u0430\u043a \u0438 \u043e \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f\u0445 \u043d\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u044d\u0442\u0430\u043f\u0430\u0445.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Rejetto HFS \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.2.1 \u0438\u043b\u0438, \u0432 \u0438\u0434\u0435\u0430\u043b\u0435, \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 3.3.4.", "url": "https://t.me/true_secator/8680", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-06T09:00:01Z", "date_only": false, "value": "2026-10-06T09:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2026-61500", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "5fbc5d1d-e4ac-4880-b93f-0ecc0c64d0ae", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-06T09:00:35.710Z", "date_only": false, "value": "2026-10-06T09:00:35.710505Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5fbc5d1d-e4ac-4880-b93f-0ecc0c64d0ae", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "0a8d6646-03ae-43d7-8d37-592fbdce415b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5fbc5d1d-e4ac-4880-b93f-0ecc0c64d0ae", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-06T09:00:36.382Z", "date_only": false, "value": "2026-10-06T09:00:36.382849Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/117393144937986529", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "42643647-1364-483d-be9e-76cb7a316ee8", "content": "Rejetto HFS servers now actively scanned for critical RCE flaw\nHackers are actively scanning for Rejetto HFS servers affected by a critical weak-signing-key vulnerability tracked as CVE-2026-61500. The flaw allows session forgery, account takeover, and remote code execution. Administrators are urged to patch or restrict exposure of HFS instances. https://www.bleepingcomputer.com/news/security/rejetto-hfs-servers-now-actively-scanned-for-critical-rce-flaw/", "url": "https://infosec.exchange/users/edwardk/statuses/117393144937986529"}, {"timestamp": "2026-10-06T09:00:37.017Z", "date_only": false, "value": "2026-10-06T09:00:37.017127Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mx72xpvc4u26", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "31f4ba4e-7f38-44c6-b6cb-47d531845b40", "content": "Rejetto HFS servers now actively scanned for critical RCE flaw\n\nHackers are actively scanning for Rejetto HFS servers affected by a critical weak-signing-key vulnerability tracked as CVE-2026-61500. The flaw allows session fo... https://threatintel.cc/2026/10/06/rejetto-hfs-servers-now-actively.html", "url": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mx72xpvc4u26"}, {"timestamp": "2026-10-06T10:10:29.128Z", "date_only": false, "value": "2026-10-06T10:10:29.128238Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mx76untiq42i", "record": "cve-2026-61500", "field": "creation_timestamp", "uuid": "c2c50f58-d627-45c7-ae24-a51079a345e7", "content": "\ud83d\udcf0 Server Rejetto HFS Mulai Dipindai Hacker untuk Celah RCE Kritis CVE-2026-61500\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/10/06/rejetto-hfs-cve-2026-61500-rce-active-scanning/\n\n#ai #artificialIntelligence #cybersecurity #keamananSiber #server #vulnerability", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mx76untiq42i"}, {"timestamp": "2026-10-06T10:40:46.674Z", "date_only": false, "value": "2026-10-06T10:40:46.674956Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mx7aksgrct2o", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "e87c8da7-1c71-4087-9c5b-d846aa2daae3", "content": "\ud83e\udd16 CVE-2026-61500 (CVSS 9.3): Rejetto HFS 3.0.0\u20133.2.0 signs session cookies with a Math.random()-derived key and leaks its output at login. Recover key \u2192 forge admin cookie \u2192 RCE via server_code. Actively scanned, PoC out. Fixed in 3.2.1.\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-61500", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mx7aksgrct2o"}, {"timestamp": "2026-10-06T13:58:28.378Z", "date_only": false, "value": "2026-10-06T13:58:28.378207Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mx7lmcslqv24", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "bbaf15d0-145b-4a9e-9c09-e81f1de170bb", "content": "Discover how Anthropic's Mythos AI synthesized a remote code execution exploit for Rejetto HFS, exposing CVE-2026-61500 through mathematical state recovery.\n\n#Anthropic #MythosAI #CVE202661500 #Cybersecurity #RejettoHFS", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mx7lmcslqv24"}, {"timestamp": "2026-10-06T15:19:51.405Z", "date_only": false, "value": "2026-10-06T15:19:51.405808Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mx7q5tkxoo2j", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "8c790d80-2e20-4196-9949-c40b56b78703", "content": "A critical authentication-bypass vulnerability, CVE-2026-61500, in Rejetto HTTP File Server (HFS) allows for full admin access and remote code execution. Exploitation was detected from an IP address in China targeting vulnerable hosts in the US and Japan. Users are advised to update to HFS v3.2.", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3mx7q5tkxoo2j"}, {"timestamp": "2026-10-06T17:34:40.915Z", "date_only": false, "value": "2026-10-06T17:34:40.915463Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mx7xow3hds2d", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "8b113774-a493-46e9-ac09-f02dba1e6b00", "content": "Rejetto HFS CVE-2026-61500 (CVSS 9.3) sfruttato: chiave cookie da Math.random(), output esposti al login \u2192 PRNG ricostruibile \u2192 cookie admin \u2192 RCE. 3.0.0\u20133.2.0, fix 3.2.1+. PoC 30/9. #infosec thehackernews.com/2026/10/atta...", "url": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mx7xow3hds2d"}, {"timestamp": "2026-10-06T19:56:05.831Z", "date_only": false, "value": "2026-10-06T19:56:05.831535Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxa7lsjbqc24", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "ef397a8e-9bd9-4c35-a8ec-bd1e8fbdacfb", "content": "Rejetto HFS servers now actively scanned for critical RCE flaw\n\nHackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery, account takeover, and remote code execution (RCE). [...]\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxa7lsjbqc24"}, {"timestamp": "2026-10-08T00:15:00.648Z", "date_only": false, "value": "2026-10-08T00:15:00.648067Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/laronskigeek.bsky.social/post/3mxd6jpdy3b2x", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "a50b384f-25ce-49a2-866f-70d956a4dc30", "content": "\ud83d\udea8 Rejetto HFS servers face a major security risk with CVE-2026-61500. It\u2019s like finding a backdoor in a vault\u2014hackers are already scanning for it. \ud83d\udee1\ufe0f https://tinyurl.com/2axdsv8h", "url": "https://bsky.app/profile/laronskigeek.bsky.social/post/3mxd6jpdy3b2x"}, {"timestamp": "2026-10-08T23:34:39.495Z", "date_only": false, "value": "2026-10-08T23:34:39.495249Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mxfmqhdeav2v", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "1c270264-0db0-47ce-b5c8-3ceab6bfb767", "content": "Alert: CVE-2026-61500 (Score: 9.3) affects Rejetto HFS. Exploits target session forgery via weak PRNG, risking unauthorized access. Update now to patch this critical flaw.", "url": "https://bsky.app/profile/technoholic.bsky.social/post/3mxfmqhdeav2v"}, {"timestamp": "2026-10-12T04:26:29Z", "date_only": false, "value": "2026-10-12T04:26:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/iCnGwy1f5k06ecUs_h1NcW69XK6Dh-C1_CmkZkcLbe8no2Y", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "51025b94-fd1c-4465-aa59-8db305beaa93", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-12T12:50:12.434Z", "date_only": false, "value": "2026-10-12T12:50:12.434021Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rlocone.bsky.social/post/3mxoklrcwoq24", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "776287d5-526c-40dc-a6fa-84a7790ac472", "content": "\ud83c\udf99\ufe0f The Register's Kettle: the FBI's third ShinyHunters arrest, and a Rejetto HFS auth bypass found by Anthropic's Mythos (CVE-2026-61500) now exploited in the wild. Are human hacking crews on borrowed time? \ud83e\udd16\n\nhttps://phipi.me/article/cmv58y3sy0005o25tdvvn5o33\n\n#InfoSec #AI #CyberSecurity", "url": "https://bsky.app/profile/rlocone.bsky.social/post/3mxoklrcwoq24"}, {"timestamp": "2026-10-14T08:53:42Z", "date_only": false, "value": "2026-10-14T08:53:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/vbWci4Z6E7ASQkjh4z1qRbdio9k_A2rvj2vV3Sl3CbaH7E8", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "5a576833-4f0d-4531-8a39-67d8ad8ecce4", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-24T22:10:00.210Z", "date_only": false, "value": "2026-10-24T22:10:00.210", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-61500", "record": "FKIE_CVE-2026-61500", "field": "lastModified"}], "metrics": {"as_of": "2026-10-28T12:26:07.676Z", "anchors": {"origin": {"timestamp": "2026-07-13T00:00:00Z", "date_only": false, "value": "2026-07-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-61500", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-07-13T00:00:00Z", "date_only": false, "value": "2026-07-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-61500", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-09-26T16:00:07Z", "date_only": false, "value": "2026-09-26T16:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/103452", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "3628238e-67f5-4433-835c-202bb2e33912", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-61500\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a aramosf\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 15:32:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-61500 Rejetto HFS predictable PRNG session forgery to RCE PoC and Docker lab\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103452", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2026-10-05T08:12:11Z", "date_only": false, "value": "2026-10-05T08:12:11.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/10236", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "d976ca32-8229-4303-af96-e3d97d6d1a0c", "content": "\u26a0\ufe0f Attackers are targeting a Rejetto HFS flaw that enables forged admin sessions and remote code execution.\n\nCVE-2026-61500 affects HFS 3.0.0\u20133.2.0. VulnCheck detected exploitation attempts against vulnerable U.S. hosts after a public PoC was released.\n\nRead - https://thehackernews.com/2026/10/attackers-target-rejetto-hfs-flaw-that.html", "url": "https://t.me/thehackernews/10236", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 7287131.0, "hours": 2024.2030555555555, "days": 84.34179398148149, "min_seconds": 7200731.0, "max_seconds": 7287131.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-13T00:00:00Z", "date_only": false, "value": "2026-07-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-61500", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-05T08:12:11Z", "date_only": false, "value": "2026-10-05T08:12:11.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/10236", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "d976ca32-8229-4303-af96-e3d97d6d1a0c", "content": "\u26a0\ufe0f Attackers are targeting a Rejetto HFS flaw that enables forged admin sessions and remote code execution.\n\nCVE-2026-61500 affects HFS 3.0.0\u20133.2.0. VulnCheck detected exploitation attempts against vulnerable U.S. hosts after a public PoC was released.\n\nRead - https://thehackernews.com/2026/10/attackers-target-rejetto-hfs-flaw-that.html", "url": "https://t.me/thehackernews/10236", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit": {"available": true, "seconds": 7287131.0, "hours": 2024.2030555555555, "days": 84.34179398148149, "min_seconds": 7200731.0, "max_seconds": 7287131.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-13T00:00:00Z", "date_only": false, "value": "2026-07-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-61500", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-05T08:12:11Z", "date_only": false, "value": "2026-10-05T08:12:11.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/10236", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "d976ca32-8229-4303-af96-e3d97d6d1a0c", "content": "\u26a0\ufe0f Attackers are targeting a Rejetto HFS flaw that enables forged admin sessions and remote code execution.\n\nCVE-2026-61500 affects HFS 3.0.0\u20133.2.0. VulnCheck detected exploitation attempts against vulnerable U.S. hosts after a public PoC was released.\n\nRead - https://thehackernews.com/2026/10/attackers-target-rejetto-hfs-flaw-that.html", "url": "https://t.me/thehackernews/10236", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 6537607.0, "hours": 1816.0019444444445, "days": 75.66674768518519, "min_seconds": 6451207.0, "max_seconds": 6537607.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-13T00:00:00Z", "date_only": false, "value": "2026-07-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-61500", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-09-26T16:00:07Z", "date_only": false, "value": "2026-09-26T16:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/103452", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "3628238e-67f5-4433-835c-202bb2e33912", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-61500\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a aramosf\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 15:32:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-61500 Rejetto HFS predictable PRNG session forgery to RCE PoC and Docker lab\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103452", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 9289567.676483, "hours": 2580.435465689722, "days": 107.51814440373842, "min_seconds": 9203167.676483, "max_seconds": 9289567.676483, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-13T00:00:00Z", "date_only": false, "value": "2026-07-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-61500", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-28T12:26:07.676Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 2002436.676483, "hours": 556.2324101341667, "days": 23.176350422256945, "min_seconds": 2002436.676483, "max_seconds": 2002436.676483, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-05T08:12:11Z", "date_only": false, "value": "2026-10-05T08:12:11.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/10236", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "d976ca32-8229-4303-af96-e3d97d6d1a0c", "content": "\u26a0\ufe0f Attackers are targeting a Rejetto HFS flaw that enables forged admin sessions and remote code execution.\n\nCVE-2026-61500 affects HFS 3.0.0\u20133.2.0. VulnCheck detected exploitation attempts against vulnerable U.S. hosts after a public PoC was released.\n\nRead - https://thehackernews.com/2026/10/attackers-target-rejetto-hfs-flaw-that.html", "url": "https://t.me/thehackernews/10236", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-28T12:26:07.676Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 2751960.676483, "hours": 764.4335212452778, "days": 31.851396718553243, "min_seconds": 2751960.676483, "max_seconds": 2751960.676483, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-26T16:00:07Z", "date_only": false, "value": "2026-09-26T16:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/103452", "record": "CVE-2026-61500", "field": "creation_timestamp", "uuid": "3628238e-67f5-4433-835c-202bb2e33912", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-61500\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a aramosf\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 15:32:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-61500 Rejetto HFS predictable PRNG session forgery to RCE PoC and Docker lab\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103452", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-28T12:26:07.676Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}