CVE-2026-61500
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
The vulnerability in Rejetto HFS versions 3.0.0 through 3.2.0 derives the session-cookie signing key from the non-cryptographic Math.random() generator and discloses its outputs to unauthenticated clients during login. A remote attacker can collect a few login responses, reconstruct the generator's state, recover the signing key, and forge a valid administrator session cookie, leading to full administrative access and remote code execution via the server_code configuration feature.
Risk Assessment
The risk for the organization includes complete takeover of the HFS server by an unauthenticated attacker, potentially leading to data theft, malware installation, or use of the server for further attacks within the internal network.
Recommendation
It is recommended to immediately upgrade Rejetto HFS to version 3.2.1 or later, which includes a fix for this vulnerability. If upgrading is not possible, restrict server access to trusted networks only and monitor logs for suspicious login attempts.
Original NVD description (English source)
Rejetto HFS 3.0.0 through 3.2.0 derives its session-cookie signing key from the non-cryptographic Math.random() generator and discloses outputs of the same generator to unauthenticated clients during login. A remote attacker can collect a small number of login responses, reconstruct the generator's state, recover the signing key, and forge a valid administrator session cookie, leading to full administrative access and remote code execution via the server_code configuration feature.