Daily Brief
Rejetto HFS exploit scans and Citrix NetScaler zero-day
Rejetto HFS servers now actively scanned for critical RCE flaw
Hackers are actively scanning for a Rejetto HFS weak signing key flaw, CVE-2026-61500, which can allow session forgery, account takeover and remote code execution. Active scanning means exposed HFS instances may be targeted quickly after discovery.
Identify any Rejetto HFS servers on the internet and patch or remove them this week; review authentication and access logs for session forgery or unexpected account use.
New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline
Citrix has released updates for CVE-2026-88779 in NetScaler ADC and Gateway after targeted zero-day attacks. The issue is a high-severity memory overflow, and researchers are still assessing whether it can also lead to remote code execution.
Patch NetScaler ADC and Gateway systems urgently, then check for signs of exploitation and confirm which deployments are customer-managed and exposed.