Known Exploited Vulnerabilities October 14, 2026 · CISA KEV Catalog

CVE-2026-105133: Ahsay AhsayCBS Improper Authentication Vulnerability

Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function. This vulnerability can be chained with CVE-2026-105134.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: Ahsay CVE-2026-105133
Related: Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor Cyber Risks · Nov 10, 2026
CVE-2026-105134: Ahsay AhsayCBS Command Injection Vulnerability Known Exploited Vulnerabilities · Oct 14, 2026
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026