October 6, 2026
- Rejetto HFS CVE-2026-61500 has moved from public PoC to observed probing, but successful exploitation has not been shown. VulnCheck canaries saw small-scale reconnaissance from one China Telecom address against deployments in Japan and the United States after the disclosure covered earlier. The flaw allows signing-key recovery, forged administrator sessions and server-side JavaScript RCE. Versions 3.0.0 through 3.2.0 are affected; 3.2.1 fixed it, and 3.3.4 is the current stable release. BleepingComputer · Vulnerabilities & Exploits
in A Trusted Company Connection Exposes 8.8 Million Danish CPR Records