CVE-2026-105134 2

Vulnerability (CVE)

Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor

Cyber Risks The Hacker News Nov 10, 2026

Cybersecurity researchers have disclosed details of an attack that exploited two now-patched vulnerabilities in AhsayCBS to deliver a Python-based implant. The activity, observed by Huntress in early October 2026, involves the exploitation of a chain...

Vulnerabilities & Patching

CVE-2026-105134: Ahsay AhsayCBS Command Injection Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Oct 14, 2026

Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s /rps/api/json/UpdateReceivers.do endpoint....

Vulnerabilities & Patching