High (7.5) in rejetto http file server. EPSS 31% chance of exploitation in the next 30 days.
rejetto HFS (aka HTTP File Server) v2.3m Build #300, when virtual files or folders are used, allows remote attackers to trigger an invalid-pointer write access violation via concurrent HTTP requests with a long URI or long HTTP headers.
Severity
CVSS 3.1
7.5 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
31% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)