Rejetto

Vulnerability activity for Rejetto: what is being exploited, what was published lately, and when the next patch release is due.

All vendors Open in the dashboard

Last 30 days

CVEs: 0
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Last 90 days

CVEs: 2
Critical (CVSS 9+): 1
Exploited (CISA KEV): 0
With exploit code: 1

Last 365 days

CVEs: 2
Critical (CVSS 9+): 1
Exploited (CISA KEV): 0
With exploit code: 1

Exploited now

CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.

9.8CriticalMay 31, 2024Rejetto HTTP File Server Code / command injectionCVE-2024-23692Rejetto HTTP File Server contains an improper neutralization of special elements used in a template engine vulnerability. This allows a remote, unauthenticated attacker to execute commands on the affected system by sending a specially crafted HTTP request.Added to KEV Jul 9, 2024 · 39 days after publicationExploited99% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
9.8CriticalOct 7, 2014Rejetto HTTP File Server (HFS) Code / command injectionCVE-2014-6287The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (HFS or HttpFileServer) allows remote attackers to execute arbitrary programs.Added to KEV Mar 25, 2022 · 2,726 days after publicationExploited99% likelyExploit codeExploit-DB · Metasploit · NucleiDetection

Recent

7.5HighSep 24, 2026Rejetto hfs2 Denial of serviceCVE-2026-97362HFS2 version 2.4.0 and earlier contains a denial of service vulnerability that allows unauthenticated attackers to cause a complete and persistent loss of availability by sending a single crafted request. Attackers can trigger a hung serving thread that enters a busy loop, rendering the entire file server unresponsive to all clients without self-recovery until an operator manually restarts the service.
10.0CriticalSep 24, 2026Rejetto hfs2 Code / command injectionCVE-2026-97359Affected: HFS2 version 2.4.0 and earlier. Attacker gains: Unauthenticated remote code execution. Recommended action: Update to the latest version of HFS2, or apply patches to address the multipart upload handler vulnerability.1.4% likelyExploit codeNucleiDetection
9.8CriticalMay 31, 2024Rejetto HTTP File Server Code / command injectionCVE-2024-23692Rejetto HTTP File Server contains an improper neutralization of special elements used in a template engine vulnerability. This allows a remote, unauthenticated attacker to execute commands on the affected system by sending a specially crafted HTTP request.Exploited99% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
9.8CriticalOct 7, 2014Rejetto HTTP File Server (HFS) Code / command injectionCVE-2014-6287The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (HFS or HttpFileServer) allows remote attackers to execute arbitrary programs.Exploited99% likelyExploit codeExploit-DB · Metasploit · NucleiDetection

See every Rejetto entry on the dashboard.