Security3 hOctober 15, 2026, 13:43

AhsayCBS flaws exploited to deploy web shells get new fixes

Ahsay Backup has released security updates for two AhsayCBS vulnerabilities, CVE-2026-105133 and CVE-2026-105134, which were exploited to drop web shells and XMRig cryptocurrency miners. The flaws could be chained to bypass authentication and execute arbitrary commands.

The Hacker News

Open source

CVE-2026-105133 and CVE-2026-105134 in AhsayCBS are actively exploited
Attacks deploy web shells and XMRig cryptocurrency miners
The chain allows authentication bypass and arbitrary command execution
New fixes follow incomplete patches

#AhsayCBS

CVE-2026-65660: Two-Stage SharePoint Attacks Attempt Web Shell Deployment

Security

Citrix NetScaler Exploit Drops Web Shells, Steals Config Data

Software

Windows 11 got more web apps because WinUI couldn't get the basics right, now Microsoft is fixing the mess

Security

AhsayCBS flaws exploited to deploy web shells get new fixes

CVE-2026-65660: Two-Stage SharePoint Attacks Attempt Web Shell Deployment

Citrix NetScaler Exploit Drops Web Shells, Steals Config Data

Windows 11 got more web apps because WinUI couldn't get the basics right, now Microsoft is fixing the mess

Windows Shell zero-day CVE-2026-96951 bypasses Mark of the Web