AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches
-
AhsayCBS has released new security updates to address two vulnerabilities that have been actively exploited in the wild to deploy web shells and XMRig cryptocurrency miners. The flaws, tracked as CVE-2026-105133 and CVE-2026-105134, can reportedly be chained together to bypass authentication and execute arbitrary commands on affected systems.
The updates follow earlier patches that were found to be incomplete, which is why Ahsay Backup has now shipped additional fixes. The report notes that the vulnerabilities were published earlier, and exploitation has already been observed in real-world attacks.
Key points:
- Affected product: AhsayCBS (Ahsay Backup)
- Vulnerabilities: CVE-2026-105133 and CVE-2026-105134
- Impact: Authentication bypass and arbitrary command execution when chained
- Observed activity: Deployment of web shells and XMRig cryptocurrency miners
- Status: New fixes released after previous patches proved incomplete
Administrators running AhsayCBS should apply the latest updates as soon as possible and review their systems for signs of compromise, particularly unexpected web shell files or unauthorized mining activity.
Source: The Hacker News
Has anyone running AhsayCBS in their environment already applied these fixes, and did you find any signs of prior exploitation?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login