Critical Vulnerabilities in AhsayCBS Exploited for Remote Code Execution
ID: a3d9b272-8f9b-5822-be2c-30d680296258
STIX ID: report--a3d9b272-8f9b-5822-be2c-30d680296258
Feed Name: ThreatCluster
Threat Score
Huntress reports active exploitation since October 7, 2026, of two critical AhsayCBS vulnerabilities (CVE-2026-105133 and CVE-2026-105134) — the latter permitting unauthenticated RCE — which attackers have chained to deploy webshells and XMRig cryptominers; organizations are urged to upgrade to AhsayCBS 10.3.4 to mitigate the threat.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.