{"id":244935,"date":"2026-10-06T01:31:58","date_gmt":"2026-10-06T06:31:58","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2026\/10\/rejetto-hfs-servers-now-actively-scanned-for-critical-rce-flaw"},"modified":"2026-10-06T01:31:58","modified_gmt":"2026-10-06T06:31:58","slug":"rejetto-hfs-servers-now-actively-scanned-for-critical-rce-flaw","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2026\/10\/rejetto-hfs-servers-now-actively-scanned-for-critical-rce-flaw","title":{"rendered":"Rejetto HFS servers now actively scanned for critical RCE flaw"},"content":{"rendered":"<p><a class=\"aligncenter blog-photo\" href=\"https:\/\/lifeboat.com\/blog.images\/rejetto-hfs-servers-now-actively-scanned-for-critical-rce-flaw.jpg\"><\/a><\/p>\n<p>Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026\u201361500, that allows session forgery, account takeover, and remote code execution (RCE).<\/p>\n<p>VulnCheck VP of Security Research Caitlin Condon posted on <a href=\"https:\/\/www.linkedin.com\/posts\/ccondon_new-kev-earlier-today-vulnchecks-canary-share-7511574376446590976-NNh3\/\" rel=\"nofollow noopener\" target=\"_blank\">LinkedIn<\/a> over the weekend that the company\u2019s Canary Intelligence honeypots had observed probes targeting CVE-2026\u201361500.<\/p>\n<p>Condon said the observed activity appears to be small-scale reconnaissance from a single China Telecom IP address probing deployments in Japan and the United States.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026\u201361500, that allows session forgery, account takeover, and remote code execution (RCE). VulnCheck VP of Security Research Caitlin Condon posted on LinkedIn over the weekend that the company\u2019s Canary Intelligence honeypots had observed probes targeting CVE-2026\u201361500. Condon said the observed activity [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1492],"tags":[],"class_list":["post-244935","post","type-post","status-publish","format-standard","hentry","category-security"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/244935","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=244935"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/244935\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=244935"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=244935"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=244935"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}