Attackers actively scan for Rejetto HFS flaw that can enable session forgery and remote code execution
Reports describe active scanning or exploitation attempts targeting a Rejetto HTTP File Server flaw involving a weak signing key or predictable key from a weak pseudo-random number generator. The flaw can enable session forgery and potentially account takeover or remote code execution.