CVE Tools
Track your stack

Rejetto

2 CVEs tracked since 2014. Since Oct 2014, 1 of them reached CISA KEV.

Rejetto CVEs per month

Oct 2014 to Oct 2014. Point at a month, or focus the strip and use the arrow keys.
Rejetto CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2014-1021

Products

The products that kept showing up in Rejetto's monthly top three, with their CVEs summed over those months.

  1. HTTP File Server21 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Rejetto.

  1. CVE-2026-97362HFS2 2.4.0 Unauthenticated Denial of Service via Hung Serving Thread7.5
  2. CVE-2026-97360HFS2 2.4.0 Unauthenticated Arbitrary File Read/Write via Template Engine10.0
  3. CVE-2026-97359HFS2 2.4.0 RCE via Multipart Upload Filename Template Injection10.0
  4. CVE-2026-61505Rejetto HFS < 3.2.1 Limited File Disclosure via Path Traversal in lang Parameter5.3
  5. CVE-2026-61504Rejetto HFS < 3.2.1 Stored XSS via File Names in Basic Web Listing5.4
  6. CVE-2026-61503Rejetto HFS < 3.2.1 Username Enumeration via Login Response Differences5.3
  7. CVE-2026-61502Rejetto HFS < 3.2.1 Cross-Site Request Forgery via GET Requests4.3
  8. CVE-2026-61501Rejetto HFS < 3.2.1 Stored XSS in Admin Log Viewer6.1
  9. CVE-2026-61500Rejetto HFS < 3.2.1 Session Forgery via Predictable Signing Key9.8
  10. CVE-2024-39943rejetto HFS (aka HTTP File Server) 3 before 0.52.10 on Linux, UNIX, and macOS allows OS command execution by remote authenticated users (if they have Upload permissions). This occurs because a shel...9.9
  11. CVE-2024-23692Rejetto HTTP File Server 2.3m Unauthenticated RCE9.8
  12. CVE-2024-1227Multiple vulnerabilities in Rejetto's Http File Server6.5
  13. CVE-2024-1226Multiple vulnerabilities in Rejetto's Http File Server7.5
  14. CVE-2020-13432rejetto HFS (aka HTTP File Server) v2.3m Build #300, when virtual files or folders are used, allows remote attackers to trigger an invalid-pointer write access violation via concurrent HTTP request...7.5
  15. CVE-2014-7226The file comment feature in Rejetto HTTP File Server (hfs) 2.3c and earlier allows remote attackers to execute arbitrary code by uploading a file with certain invalid UTF-8 byte sequences that are ...7.5

The record

Peak rank
#117 in Oct 2014
Busiest month shown
Oct 2014, 2 CVEs
Months with a KEV entry
1 since Oct 2014
Monthly snapshots
1 since 2014
Rejetto's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store