Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor
Cybersecurity researchers have disclosed details of an attack that exploited two now-patched vulnerabilities in AhsayCBS to deliver a Python-based implant. The activity, observed by Huntress in early October 2026, involves the exploitation of a chain comprising CVE-2026-105133 and CVE-2026-105134 to bypass authentication and execute arbitrary commands on affected systems. Patches for the two
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2026-105133CVE-2026-105134
- Related
- CVE-2026-105133: Ahsay AhsayCBS Improper Authentication Vulnerability Known Exploited Vulnerabilities · Oct 14, 2026CVE-2026-105134: Ahsay AhsayCBS Command Injection Vulnerability Known Exploited Vulnerabilities · Oct 14, 2026Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026