Rejetto Hfs2
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Rejetto Hfs2.
By the Year
In 2026 there have been 3 vulnerabilities in Rejetto Hfs2 with an average score of 9.6 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 3 | 9.57 |
It may take a day or so for new Hfs2 vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Rejetto Hfs2 Security Vulnerabilities
HFS2 2.4.0 DoS via hung thread loop
CVE-2026-97362
8.7 - High
- September 24, 2026
HFS2 version 2.4.0 and earlier contains a denial of service vulnerability that allows unauthenticated attackers to cause a complete and persistent loss of availability by sending a single crafted request. Attackers can trigger a hung serving thread that enters a busy loop, rendering the entire file server unresponsive to all clients without self-recovery until an operator manually restarts the service.
Infinite Loop
HFS2 2.4.0-: unauthenticated arbitrary file access via macro dispatcher
CVE-2026-97360
10 - Critical
- September 24, 2026
HFS2 version 2.4.0 and earlier contains an unauthenticated arbitrary file access vulnerability that allows unauthenticated attackers to read, write, append, and delete files anywhere the HFS service account has filesystem access outside the shared folder. Attackers can exploit the macro dispatcher's lack of authorization model combined with the path resolver's failure to confine absolute paths to manipulate the template engine and compromise the confidentiality, integrity, and availability of the host.
AuthZ
HFS2 <2.4.0: Multipart Upload Handler Template Injection Enables RCE
CVE-2026-97359
10 - Critical
- September 24, 2026
HFS2 version 2.4.0 and earlier contains a template injection vulnerability in the multipart upload handler that allows unauthenticated attackers to achieve remote code execution by embedding malicious template syntax in a filename. Attackers can craft a filename containing a closing template quoting sequence followed by an exec macro, which bypasses the authorization check in the dispatcher to execute arbitrary commands on the underlying host system.
1336
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Rejetto Hfs2 or by Rejetto? Click the Watch button to subscribe.
