Vendor

    Rejetto

    16 known vulnerabilities in products by Rejetto, 2 of them actively exploited (CISA KEV).

    Key figures

    16

    Vulnerabilities

    2

    Actively exploited (KEV)

    1

    Used by ransomware

    6

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Rejetto
    CriticalCVE-2024-23692

    Rejetto HTTP File Server 2.3m Unauthenticated RCE

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2014-6287

    Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2024-39943

    Rejetto Http File Server: security vulnerability

    		9.9
    HighCVE-2020-13432

    Rejetto Http File Server: security vulnerability

    		7.5
    CriticalCVE-2026-97359

    HFS2 2.4.0 RCE via Multipart Upload Filename Template Injection

    		10.0
    CriticalCVE-2026-61500

    Rejetto HFS < 3.2.1 Session Forgery via Predictable Signing Key

    		9.8
    CriticalCVE-2026-97360

    HFS2 2.4.0 Unauthenticated Arbitrary File Read/Write via Template Engine

    		10.0
    HighCVE-2026-97362

    HFS2 2.4.0 Unauthenticated Denial of Service via Hung Serving Thread

    		7.5
    Not ratedCVE-2014-7226

    Rejetto Http File Server: Code Execution

    		—
    MediumCVE-2026-61505

    Rejetto HFS < 3.2.1 Limited File Disclosure via Path Traversal in lang Parameter

    		5.3
    MediumCVE-2026-61503

    Rejetto HFS < 3.2.1 Username Enumeration via Login Response Differences

    		5.3
    MediumCVE-2026-61501

    Rejetto HFS < 3.2.1 Stored XSS in Admin Log Viewer

    		6.1
    HighCVE-2024-1226

    Multiple vulnerabilities in Rejetto's Http File Server

    		7.5
    MediumCVE-2024-1227

    Multiple vulnerabilities in Rejetto's Http File Server

    		6.5
    MediumCVE-2026-61504

    Rejetto HFS < 3.2.1 Stored XSS via File Names in Basic Web Listing

    		5.4
    MediumCVE-2026-61502

    Rejetto HFS < 3.2.1 Cross-Site Request Forgery via GET Requests

    		4.3

    News

    Products

    Products by Rejetto
    Rejetto Http File Server83
    Hfs60
    Hfs230