Known Exploited Vulnerabilities October 14, 2026 · CISA KEV Catalog

CVE-2026-105134: Ahsay AhsayCBS Command Injection Vulnerability

Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s /rps/api/json/UpdateReceivers.do endpoint. This vulnerability can be chained with CVE-2026-105133.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

AhsayCVE-2026-105134

Related

Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor Cyber Risks · Nov 10, 2026

CVE-2026-105133: Ahsay AhsayCBS Improper Authentication Vulnerability Known Exploited Vulnerabilities · Oct 14, 2026

Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026