<![CDATA[AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches]]>AhsayCBS has released new security updates to address two vulnerabilities that have been actively exploited in the wild to deploy web shells and XMRig cryptocurrency miners. The flaws, tracked as CVE-2026-105133 and CVE-2026-105134, can reportedly be chained together to bypass authentication and execute arbitrary commands on affected systems.

The updates follow earlier patches that were found to be incomplete, which is why Ahsay Backup has now shipped additional fixes. The report notes that the vulnerabilities were published earlier, and exploitation has already been observed in real-world attacks.

Key points:

  • Affected product: AhsayCBS (Ahsay Backup)
  • Vulnerabilities: CVE-2026-105133 and CVE-2026-105134
  • Impact: Authentication bypass and arbitrary command execution when chained
  • Observed activity: Deployment of web shells and XMRig cryptocurrency miners
  • Status: New fixes released after previous patches proved incomplete

Administrators running AhsayCBS should apply the latest updates as soon as possible and review their systems for signs of compromise, particularly unexpected web shell files or unauthorized mining activity.

Source: The Hacker News

Has anyone running AhsayCBS in their environment already applied these fixes, and did you find any signs of prior exploitation?

]]>https://xploitlk.com/topic/725/ahsaycbs-flaws-exploited-to-deploy-web-shells-get-new-fixes-after-incomplete-patchesRSS for NodeTue, 27 Oct 2026 08:16:22 GMTSun, 18 Oct 2026 02:30:21 GMT60