HTTP File Server

Mentions · 7d0
Mentions · 30d7
All mentions8
First seenAug 19, 2026
Last mentioned24d ago

Timeline

8 articles · newest first

Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws

Anthropic expands vetted Claude cyber access after Glasswing verified 129,000 software flaws.

The Hacker Newsupdated Oct 7, 20:51 UTC · 23d agofirst Oct 7, 08:07 UTC · 24d agoAI safety & securityExploited11 sourcesCVE-2026-26980 CVE-2026-615007 · 2 reads

Google’s bug bounty pause highlights growing AI vulnerability triage challenge

Google paused some bug bounty submissions after low-quality AI-generated vulnerability reports overwhelmed triage.

CSO OnlineOct 6, 10:10 UTC · 24d agoAI safety & security5 · 2 reads

Rejetto HFS servers now actively scanned for critical RCE flaw

Hackers are scanning Rejetto HFS for CVE-2026-61500, a critical flaw enabling admin session forgery and RCE.

BleepingComputerOct 5, 20:20 UTC · 25d agoExploit / PoCCVE-2026-615002 · 1 read

Anthropic Mythos Found A Bug in Rejetto HFS. Attackers Are Now Exploiting It.

Attackers are exploiting CVE-2026-61500, a critical Rejetto HFS authentication-bypass and code-execution flaw found with Anthropic Mythos.

Security AffairsOct 5, 18:15 UTC · 25d agoExploit / PoCExploitedCVE-2026-61500 CVE-2024-236928 · 3 reads

Exploitation Hits Rejetto HFS Vulnerability Discovered by AI

Attackers are exploiting Rejetto HFS flaw CVE-2026-61500 to forge admin cookies and gain code execution.

SecurityWeekOct 5, 11:00 UTC · 25d agoExploit / PoCExploitedCVE-2026-615002 · 1 read

Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE

Attackers are exploiting Rejetto HFS CVE-2026-61500 to forge admin sessions and gain remote code execution.

The Hacker NewsOct 5, 08:09 UTC · 26d agoExploit / PoCExploitedCVE-2026-61500 CVE-2024-236924 · 1 read

Anthropic's super bug-hunting model Mythos is hardcore good at math, as latest vuln under attack shows

Attackers are exploiting CVE-2026-61500, a critical Rejetto HFS auth bypass discovered by Anthropic’s Mythos.

The Register · SecurityOct 3, 15:27 UTC · 27d agoExploit / PoCExploitedCVE-2026-615003 · 2 reads

Inside Operation CameraSwarm: How One Actor Took Over 14,000 Dahua Cameras

One actor compromised over 14,000 Dahua cameras in Ukraine and Russia using brute-force, authentication bypass, and cloud relay serial-number abuse.

Security AffairsAug 19, 17:37 UTC · Aug 19, 2026Threat actorExploitedCVE-2024-39943 CVE-2025-317022 · 1 read

Related CVEs

by mentions

CVE-2026-615002%9.3
Rejetto HFS 3.0.0 through 3.2.0 derives its session-cookie signing key from the non-cryptographic Math.random() generator and discloses outputs of the same…
published Jul 13, 2026PoC
CVE-2024-2369299%9.8
Unauthenticated Template Injection RCE in Rejetto HTTP File Server 2.3m
published May 31, 2024rejetto HTTP File ServerKEVRansomwarePoC ×5
CVE-2024-3994337%8.8
rejetto HFS (aka HTTP File Server) 3 before 0.52.10 on Linux, UNIX, and macOS allows OS command execution by remote authenticated users (if they have Upload…
published Jul 4, 2024rejetto http file server
CVE-2026-2698070%7.5
Unauthenticated SQL Injection in Ghost CMS Allows Arbitrary Database Reads
published Feb 20, 2026Ghost
CVE-2025-31702<1%6.8
A vulnerability exists in certain Dahua embedded products
published Oct 15, 2025

Appears with

Rejettovendor · 8
Anthropicorganization · 7
Mythosai model · 6
VulnCheckorganization · 6
Horizon3.aiorganization · 4
Anthropicvendor · 3
CISAorganization · 2
Claude Sonnet 5.5ai model · 1
Koaproduct · 1
Horizon3organization · 1
Vercelorganization · 1
HATVIBEmalware · 1
Ghost CMSproduct · 1
IDCorganization · 1
Lorexvendor · 1
Googleorganization · 1

Entities are extracted by the model from each article. First seen Aug 19, 2026, last mentioned 24d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.