CVE-2026-105134

Everything Threat Times has reported about CVE-2026-105134: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

AhsayCBS Hotfixes Address Auth Bypass and RCE Chain Exploited In-The-Wild

Threat TimesOct 14, 2026

Ahsay released hotfixes on October 12, 2026, to patch two vulnerabilities in AhsayCBS that attackers chained to achieve remote code execution on backup servers.

Vulnerabilities

Attackers Exploit Unpatched AhsayCBS Flaws to Deploy Web Shells and Miners

Threat TimesOct 9, 2026

Threat actors are actively exploiting two authentication bypass vulnerabilities in AhsayCBS backup software to install malicious software on compromised systems.