Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE

A critical security flaw impacting Rejetto HTTP File Server HFS is witnessing active exploitation attempts according to VulnCheck The vulnerability in question is CVE202661500 CVSS score 93 a case of session forgery stemming from the use of a weak pseudorandom number generator PRNG that can lead to a predictable key which an attacker can then use to gain unauthorized access and