CVE-2026-105133 2

Vulnerability (CVE)

Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor

Cyber Risks The Hacker News Nov 10, 2026

Cybersecurity researchers have disclosed details of an attack that exploited two now-patched vulnerabilities in AhsayCBS to deliver a Python-based implant. The activity, observed by Huntress in early October 2026, involves the exploitation of a chain...

Vulnerabilities & Patching

CVE-2026-105133: Ahsay AhsayCBS Improper Authentication Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Oct 14, 2026

Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function. This vulnerability can be chained with...

Vulnerabilities & Patching