Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery, account takeover, and remote code execution (RCE). [...]
Rejetto HFS servers now actively scanned for critical RCE flaw
Summary + source link. No paywalls, no tracking.