Topic

Cve 2026 105133

Coverage tagged cve 2026 105133.

Articles: 1
Desk: 1

Data graphic: attack chain from exposed AhsayCBS through CVE-2026-105133 checkSysPwd auth bypass and CVE-2026-105134 UpdateReceivers.do command injection , no fix for either, to SYSTEM, then a webshell or an XMRig miner in different incidents. CVSS v3.1 10.0 VulDB for CVE-2026-105134; Huntress reports 5 organizations targeted.

highExploits Cve 2026 105133

Attackers chain two unpatched AhsayCBS flaws to get SYSTEM webshells and a hidden Monero miner

Attackers chain AhsayCBS CVE-2026-105133 and CVE-2026-105134 for SYSTEM webshells and an XMRig miner. No Ahsay fix; Huntress says 10.3.4 is affected.

Oct 11 · 6 min