A New Wave of Attacks Exploits Critical Flaw in Rejetto HFS, Leaving Admin Sessions Vulnerable
A critical flaw in Rejetto HFS, a popular file hosting software, has been exploited by attackers to gain unauthorized access to admin sessions and execute remote code. The vulnerability, which affects multiple versions of the software, enables attackers to forge admin sessions and escalate privileges, ultimately leading to a complete compromise of affected systems.
The Rejetto HFS flaw is particularly concerning due to its widespread adoption across various industries, including government, finance, and education. It’s estimated that thousands of organizations worldwide rely on the software to host files, making it a prime target for attackers. The vulnerability was first identified in July 2026 but has only recently been exploited by malicious actors.
The attack vector involves exploiting the Rejetto HFS flaw to create a forged admin session, which can be used to bypass authentication mechanisms and gain access to sensitive areas of the system. Once inside, attackers can execute remote code, effectively granting them control over the compromised system. This level of access allows attackers to modify files, steal data, or even take control of the entire network.
The fact that this vulnerability has been exploited by attackers in a real-world attack is a stark reminder of the importance of patching and updating software regularly. Rejetto HFS is not the only software affected by this issue; multiple versions of other file hosting solutions may also be vulnerable to similar attacks. It’s essential for administrators and users to stay vigilant and monitor their systems closely for signs of suspicious activity.
What makes this vulnerability particularly insidious is its ability to enable cross-domain privilege escalation, allowing attackers to move laterally across the network and exploit additional vulnerabilities. This type of attack can be devastating, as it enables attackers to create a backdoor into the system, making it extremely challenging for security teams to detect and respond to the breach.
To protect against this vulnerability, users are advised to update their Rejetto HFS software to the latest version and apply any available patches. Additionally, administrators should monitor their systems closely for signs of suspicious activity and implement robust monitoring and detection tools to identify potential threats early on. By staying informed and proactive, organizations can mitigate the risks associated with this vulnerability and maintain a secure online presence.
Source: The Hacker News — 2026-10-05