rejetto vulnerabilities
12 published CVEs name rejetto among the affected products; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 12
- Last 12 months
- 9
- Critical
- 4
- Known exploited
- 1
Critical 4High 2Medium 6Low 0Not scored 0
CVEs per yearBy the year they were published
- 20243
- 20269
Known exploitedNewest addition to KEV first
- CVE-2024-23692
Rejetto HTTP File Server 2.3m Unauthenticated RCE
Rejetto · HTTP File Server
ExploitedCritical9.8
Newest CVEs
- CVE-2026-97362
HFS2 2.4.0 Unauthenticated Denial of Service via Hung Serving Thread
rejetto · hfs2
High8.7 - CVE-2026-97360
HFS2 2.4.0 Unauthenticated Arbitrary File Read/Write via Template Engine
rejetto · hfs2
Critical10.0 - CVE-2026-97359
HFS2 2.4.0 RCE via Multipart Upload Filename Template Injection
rejetto · hfs2
Critical10.0 - CVE-2026-61505
Rejetto HFS < 3.2.1 Limited File Disclosure via Path Traversal in lang Parameter
rejetto · hfs
Medium6.9 - CVE-2026-61504
Rejetto HFS < 3.2.1 Stored XSS via File Names in Basic Web Listing
rejetto · hfs
Medium5.1 - CVE-2026-61503
Rejetto HFS < 3.2.1 Username Enumeration via Login Response Differences
rejetto · hfs
Medium6.9 - CVE-2026-61502
Rejetto HFS < 3.2.1 Cross-Site Request Forgery via GET Requests
rejetto · hfs
Medium5.1 - CVE-2026-61501
Rejetto HFS < 3.2.1 Stored XSS in Admin Log Viewer
rejetto · hfs
Medium5.3 - CVE-2026-61500
Rejetto HFS < 3.2.1 Session Forgery via Predictable Signing Key
rejetto · hfs
Critical9.3 - CVE-2024-23692
Rejetto HTTP File Server 2.3m Unauthenticated RCE
Rejetto · HTTP File Server
ExploitedCritical9.8