Threat Actors Exploit Critical AhsayCBS Flaws to Drop Webshells and XMRig Cryptominer

T1Covered by 1 source · first reported by Huntress at 08 Oct, 20:00 UTC

Threat actors are exploiting AhsayCBS flaws, including CVE-2026-105133 and CVE-2026-105134, to deploy webshells and XMRig cryptominers. Update to 10.3.4 and restrict access now.

security

Sources

• T1Threat Actors Exploit Critical AhsayCBS Flaws to Drop Webshells and XMRig CryptominerHuntress08 Oct, 20:00

Vulnerabilities

• CVE-2026-105133
• CVE-2026-105134