ctrlINT What the industry said about every indicator, with the quote

CVE-2024-23692Vulnerability

Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 3 independent sources · first reported by Horizon3.ai · last reported

Last reported 19 days ago

CISA KEVAdded 9 Jul 2024
Fix due 30 Jul 2024
Used by ransomware: knownCISA KEV catalogue
EPSS99.5%
higher than 99% of CVEsFIRST EPSS, as of 15 Oct 2026

What the reports say

3 reports, newest first · the exact sentence from each

  1. “HFS had already appeared in CISA’s Known Exploited Vulnerabilities catalog because of CVE-2024-23692, an unauthenticated template injection that could lead to remote code execution.”

    Security AffairsNews
    Anthropic Mythos Found A Bug in Rejetto HFS. Attackers Are Now Exploiting It.

  2. “CVE-2026-61500 is the second vulnerability in Rejetto HTTP File Server after CVE-2024-23692 (CVSS score: 9.8) to come under active exploitation in the wild.”

    The Hacker NewsNews
    Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE

  3. “It has previously appeared on the CISA Known Exploited Vulnerabilities (KEV) list for CVE-2024-23692, an unauthenticated template injection leading to remote code execution.”

    Horizon3.aiVendor
    Horizon3’s Tales from the Trenches: Anthropic’s Mythos and Rejetto HFS

Indicators reported together

named in the same reports

Also named with it: CVE-2026-61500

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2024-23692 here?
No account needed. We do not store your IP address.