AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches

T2Critical 100Covered by 1 source · first reported by The Hacker News at 15 Oct, 06:43 UTC

Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells and XMRig cryptocurrency miners. The vulnerabilities in question are CVE-2026-105133 and CVE-2026-105134, which could be chained to sidestep…

crypto releases security

Sources

T2AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete PatchesThe Hacker News15 Oct, 06:43

Vulnerabilities

CVE-2026-105133
CVE-2026-105134

Why this score

Signals contributing to the severity score
Signal	Points
kev added	50
kev short fuse — 3 days to remediate	15
ssvc active	35
cvss critical — 10	20
public poc — 1 repositories	20