search
CVE-2026-105134
Trends
- 1Huntress warns of active attacks on AhsayCBS backup servers●Huntress reports active exploitation of AhsayCBS CVE-2026-105133 and CVE-2026-105134 chained for auth bypass and OS comm
Security firm Huntress reports attackers are actively exploiting two vulnerabilities in AhsayCBS backup software, chaining CVE-2026-105133 and CVE-2026-105134 to bypass authentication and run operating system commands. Intrusions involve web shell deployment and XMRig cryptocurrency miners, giving attackers persistence on backup servers. Defenders are urged to patch immediately and hunt for indicators of compromise.
- 2Security flaw disclosed in AhsayCBS backup software●AhsayCBS https:// radar.offseq.com/threat/a-flaw -has-been-found-in-ahsay-ahsaycbs-up-to-1032-cve-2026-105134-a9f0def985
A vulnerability, tracked as CVE-2026-105134, has been reported in AhsayCBS, the backup software from Ahsay, affecting versions up to 10.3.2. The flaw was published on a threat-tracking service and is circulating among infosec communities, with security professionals flagging it for administrators who run Ahsay backup infrastructure. Details on severity and exploitation remain limited so far.