Security1 hOctober 9, 2026, 17:23

Hackers Exploit Two Unpatched AhsayCBS Vulnerabilities in the Wild

Huntress warns that attackers are exploiting CVE-2026-105133 and CVE-2026-105134 in the AhsayCBS backup solution for remote code execution. All versions up to 10.3.4 are affected with no patch available, and at least five organizations had been targeted as of October 8.

SecurityWeek

Open source

Hackers Exploit Two Unpatched AhsayCBS Vulnerabilities in the Wild

CVE-2026-105133 and CVE-2026-105134 allow authentication bypass and OS command injection
All AhsayCBS versions up to the latest 10.3.4 are affected, with no patch released
Attackers deploy JSP webshells and XMRig cryptominers disguised as Microsoft Edge
Huntress advises restricting management interface access and checking for compromise

#AhsayCBS#Huntress

CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild

Security

Two Unpatched Citrix NetScaler RCE Zero-Days Actively Exploited

Security

NetScaler patches eight flaws, two already exploited in the wild

Security

Hackers Exploit Two Unpatched AhsayCBS Vulnerabilities in the Wild

CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild

Two Unpatched Citrix NetScaler RCE Zero-Days Actively Exploited

NetScaler patches eight flaws, two already exploited in the wild

CISA adds two Zammad flaws to Known Exploited Vulnerabilities catalog