AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-10-15 06:43 UTC
Importiert: 2026-10-21 07:10 UTC
CVSS: 10.0
Quelle-ID: thn_global
uid_hash: 1c36c787aa8996d22ebdfbb19d38b073a3d144b61a8750d2a8d937e1668d0ac9

The Hacker News

Inhalt

Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells and XMRig cryptocurrency miners.

The vulnerabilities in question are CVE-2026-105133 and CVE-2026-105134, which could be chained to sidestep authentication and execute arbitrary commands on affected systems.

In a report published earlier

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-105133	CRITICAL	10	HIGH	7.5			2026-10-04
CVE-2026-105134	CRITICAL	10	CRITICAL	10			2026-10-04

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews

Zurueck zur Eintrags-Liste