{"uuid": "a3cd49d3-66ab-4a4f-968d-d6929328e879", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "seen", "source": "https://t.me/pphm_HackerNews/3523", "content": "\ud83d\udd34 Unpatched AhsayCBS Vulnerabilities Exploited in the Wild\n\nHackers have been exploiting two unpatched vulnerabilities in the AhsayCBS backup solution for remote code execution (RCE), cybersecurity firm Huntress warns.\n\nA centralized cloud backup server management console developed by Ahsay Systems, AhsayCBS provides backup policy, storage, and user management and is popular among MSPs and system integrators.\n\nTracked as CVE-2026-105133 and CVE-2026-105134, the exploited security defects allow attackers to manipulate arguments in certain functions of the tool to bypass authentication and inject OS commands.", "creation_timestamp": "2026-10-09T19:42:04.000000Z"}