CVE-2026-61501— Rejetto HFS < 3.2.1 Stored XSS in Admin Log Viewer
Possible ATT&CK Techniques 2AI
T1059 · Command and Scripting Interpreter T1189 · Drive-by CompromiseGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-61501
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Rejetto HFS < 3.2.1 Stored XSS in Admin Log Viewer
Source: NVD (National Vulnerability Database)
Vulnerability Description
Rejetto HFS 3.0.0 through 3.2.0 renders log entries in the administration panel as HTML without sanitization. A remote unauthenticated attacker can submit a failed login with a crafted username that is written to the error log and executes JavaScript in an administrator's browser when the logs are viewed, allowing the attacker to create accounts or execute code on the server with the administrator's privileges.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: NVD (National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-61501
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-61501
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-61501 (1)
- 🔗 Rejetto HFS < 3.2.1 Stored XSS in Admin Log Viewer | Advisories | VulnCheckthird-party-advisory
Vendor Pages for CVE-2026-61501 (1)
Same Patch Batch · rejetto · 2026-07-13 · 6 CVEs total
| CVE-2026-61500 | 9.8 CRITICAL | Rejetto HFS < 3.2.1 Session Forgery via Predictable Signing Key |
| CVE-2026-61504 | 5.4 MEDIUM | Rejetto HFS < 3.2.1 Stored XSS via File Names in Basic Web Listing |
| CVE-2026-61503 | 5.3 MEDIUM | Rejetto HFS < 3.2.1 Username Enumeration via Login Response Differences |
| CVE-2026-61505 | 5.3 MEDIUM | Rejetto HFS < 3.2.1 Limited File Disclosure via Path Traversal in lang Parameter |
| CVE-2026-61502 | 4.3 MEDIUM | Rejetto HFS < 3.2.1 Cross-Site Request Forgery via GET Requests |
IV. Related Vulnerabilities
Same product: hfs
- CVE-2026-61505
Rejetto HFS < 3.2.1 Limited File Disclosure via Path Travers - CVE-2026-61504
Rejetto HFS < 3.2.1 Stored XSS via File Names in Basic Web L - CVE-2026-61503
Rejetto HFS < 3.2.1 Username Enumeration via Login Response - CVE-2026-61502
Rejetto HFS < 3.2.1 Cross-Site Request Forgery via GET Reque - CVE-2026-61500
Rejetto HFS < 3.2.1 Session Forgery via Predictable Signing
Same vendor: rejetto
- CVE-2026-61505
Rejetto HFS < 3.2.1 Limited File Disclosure via Path Travers - CVE-2026-61504
Rejetto HFS < 3.2.1 Stored XSS via File Names in Basic Web L - CVE-2026-61503
Rejetto HFS < 3.2.1 Username Enumeration via Login Response - CVE-2026-61502
Rejetto HFS < 3.2.1 Cross-Site Request Forgery via GET Reque - CVE-2026-61500
Rejetto HFS < 3.2.1 Session Forgery via Predictable Signing
Same weakness: CWE-79
- CVE-2026-15678
code-projects Online Job Portal DetailJob.php cross site scr - CVE-2026-7640
WP Customer Area <= 8.3.5 - Authenticated (Contributor+) Sto - CVE-2026-11390
News Kit Addons For Elementor <= 1.4.6 - Authenticated (Cont - CVE-2026-44767
Allowlist Bypass in setThemeRoot() Enables Cross-Origin CSS - CVE-2026-44760
Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Ap
V. Comments for CVE-2026-61501
No comments yet