Tag: session forgery

Exploits Target Rejetto HFS Flaw for Admin Access

A critical flaw in Rejetto HFS, tracked as CVE-2026-61500, allows hackers to gain admin access by exploiting a weak pseudo-random number generator that generates session-cookie signing keys. This vulnerability, with a CVSS score of 9.3, puts users at risk of session forgery attacks.