https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 16:50:41 +0000 https://vulnerability.circl.lu/sighting/f163841e-e955-436d-b01b-8c13c6043729/export {"uuid": "f163841e-e955-436d-b01b-8c13c6043729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mxmdztbbsf2w", "content": "CVE-2026-105133 is trending. Hype score 4, currently #9 on cvemon.\n\nA vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API.\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-105133", "creation_timestamp": "2026-10-11T15:47:28.306880Z"} {"uuid": "f163841e-e955-436d-b01b-8c13c6043729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mxmdztbbsf2w", "content": "CVE-2026-105133 is trending. Hype score 4, currently #9 on cvemon.\n\nA vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API.\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-105133", "creation_timestamp": "2026-10-11T15:47:28.306880Z"} https://vulnerability.circl.lu/sighting/f163841e-e955-436d-b01b-8c13c6043729/export Sun, 11 Oct 2026 15:47:28 +0000 https://vulnerability.circl.lu/sighting/1e8b7fe1-77bd-4d07-8ffb-f810f9a6366e/export {"uuid": "1e8b7fe1-77bd-4d07-8ffb-f810f9a6366e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mxlhqzwk632g", "content": "\ud83c\udf0d \u00c0 l\u2019international (4)\n\u2022 AhsayCBS : Deux vuln\u00e9rabilit\u00e9s dont une critique (CVE-2026-105133 et CVE-2026-105134) sont d\u00e9j\u00e0 exploit\u00e9es pour d\u00e9ployer des webshells et un mineur XMRig sur des serveurs de sauvegarde non corrig\u00e9s. (Forenshield)", "creation_timestamp": "2026-10-11T07:21:28.259464Z"} {"uuid": "1e8b7fe1-77bd-4d07-8ffb-f810f9a6366e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mxlhqzwk632g", "content": "\ud83c\udf0d \u00c0 l\u2019international (4)\n\u2022 AhsayCBS : Deux vuln\u00e9rabilit\u00e9s dont une critique (CVE-2026-105133 et CVE-2026-105134) sont d\u00e9j\u00e0 exploit\u00e9es pour d\u00e9ployer des webshells et un mineur XMRig sur des serveurs de sauvegarde non corrig\u00e9s. (Forenshield)", "creation_timestamp": "2026-10-11T07:21:28.259464Z"} https://vulnerability.circl.lu/sighting/1e8b7fe1-77bd-4d07-8ffb-f810f9a6366e/export Sun, 11 Oct 2026 07:21:28 +0000 https://vulnerability.circl.lu/sighting/3ea2ffbb-78e3-4068-8ea0-95f58dadcb4d/export {"uuid": "3ea2ffbb-78e3-4068-8ea0-95f58dadcb4d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b2b7b8c9-bd9b-42a5-9b74-32ea88ff338f", "content": "", "creation_timestamp": "2026-10-10T10:00:35.096415Z"} {"uuid": "3ea2ffbb-78e3-4068-8ea0-95f58dadcb4d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b2b7b8c9-bd9b-42a5-9b74-32ea88ff338f", "content": "", "creation_timestamp": "2026-10-10T10:00:35.096415Z"} https://vulnerability.circl.lu/sighting/3ea2ffbb-78e3-4068-8ea0-95f58dadcb4d/export Sat, 10 Oct 2026 10:00:35 +0000 https://vulnerability.circl.lu/sighting/f1640fec-8cd5-4faa-80b9-3d5006879b8d/export {"uuid": "f1640fec-8cd5-4faa-80b9-3d5006879b8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mxiwqpdjau2p", "content": "Same story, different day, as unpatched AhsayCBS flaws CVE-2026-105133 and CVE-2026-105134 get actively hammered in the wild. This calamity falls directly upon AhsayCBS administrators who dared to hope their backup servers might require actual logins. Defending ourselves against ...\n\nRead full story", "creation_timestamp": "2026-10-10T07:11:44.068612Z"} {"uuid": "f1640fec-8cd5-4faa-80b9-3d5006879b8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mxiwqpdjau2p", "content": "Same story, different day, as unpatched AhsayCBS flaws CVE-2026-105133 and CVE-2026-105134 get actively hammered in the wild. This calamity falls directly upon AhsayCBS administrators who dared to hope their backup servers might require actual logins. Defending ourselves against ...\n\nRead full story", "creation_timestamp": "2026-10-10T07:11:44.068612Z"} https://vulnerability.circl.lu/sighting/f1640fec-8cd5-4faa-80b9-3d5006879b8d/export Sat, 10 Oct 2026 07:11:44 +0000 https://vulnerability.circl.lu/sighting/5d661554-934b-40f7-80e6-9a67c19cf486/export {"uuid": "5d661554-934b-40f7-80e6-9a67c19cf486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mxi62jhkyv2o", "content": "AhsayCBS flaws CVE-2026-105133 and CVE-2026-105134 reportedly face exploitation. Restrict unnecessary access and check vendor guidance. The supplied report describes them as unpatched; no fixed build is given. https://cti.securitycyber.uk", "creation_timestamp": "2026-10-09T23:49:49.990169Z"} {"uuid": "5d661554-934b-40f7-80e6-9a67c19cf486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mxi62jhkyv2o", "content": "AhsayCBS flaws CVE-2026-105133 and CVE-2026-105134 reportedly face exploitation. Restrict unnecessary access and check vendor guidance. The supplied report describes them as unpatched; no fixed build is given. https://cti.securitycyber.uk", "creation_timestamp": "2026-10-09T23:49:49.990169Z"} https://vulnerability.circl.lu/sighting/5d661554-934b-40f7-80e6-9a67c19cf486/export Fri, 09 Oct 2026 23:49:49 +0000 https://vulnerability.circl.lu/sighting/c4b6e430-1803-4397-8095-6bcc233e4c72/export {"uuid": "c4b6e430-1803-4397-8095-6bcc233e4c72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44849", "content": "Unpatched AhsayCBS Vulnerabilities Exploited in the Wild\n\nThe flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands.\nThe post Unpatched AhsayCBS Vulnerabilities Exploited in the Wild appeared first on SecurityWeek.\nhttps://www.securityweek.com/unpatched-ahsaycbs-vulnerabilities-exploited-in-the-wild/", "creation_timestamp": "2026-10-09T23:00:48.000000Z"} {"uuid": "c4b6e430-1803-4397-8095-6bcc233e4c72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44849", "content": "Unpatched AhsayCBS Vulnerabilities Exploited in the Wild\n\nThe flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands.\nThe post Unpatched AhsayCBS Vulnerabilities Exploited in the Wild appeared first on SecurityWeek.\nhttps://www.securityweek.com/unpatched-ahsaycbs-vulnerabilities-exploited-in-the-wild/", "creation_timestamp": "2026-10-09T23:00:48.000000Z"} https://vulnerability.circl.lu/sighting/c4b6e430-1803-4397-8095-6bcc233e4c72/export Fri, 09 Oct 2026 23:00:48 +0000 https://vulnerability.circl.lu/sighting/8e22fa7e-e2e2-43f4-933f-d789edf18821/export {"uuid": "8e22fa7e-e2e2-43f4-933f-d789edf18821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxhsqktipj2g", "content": "\ud83e\udd16 Unpatched AhsayCBS backup platform flaws (incl. CVE-2026-105133) exploited in the wild: webshells + XMRig miners disguised as Microsoft Edge. No patch yet.\nhttps://www.bleepingcomputer.com/news/security/unpatched-ahsaycbs-flaws-exploited-to-deploy-webshells-mine-crypto/", "creation_timestamp": "2026-10-09T20:27:24.778207Z"} {"uuid": "8e22fa7e-e2e2-43f4-933f-d789edf18821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxhsqktipj2g", "content": "\ud83e\udd16 Unpatched AhsayCBS backup platform flaws (incl. CVE-2026-105133) exploited in the wild: webshells + XMRig miners disguised as Microsoft Edge. No patch yet.\nhttps://www.bleepingcomputer.com/news/security/unpatched-ahsaycbs-flaws-exploited-to-deploy-webshells-mine-crypto/", "creation_timestamp": "2026-10-09T20:27:24.778207Z"} https://vulnerability.circl.lu/sighting/8e22fa7e-e2e2-43f4-933f-d789edf18821/export Fri, 09 Oct 2026 20:27:24 +0000 https://vulnerability.circl.lu/sighting/a3cd49d3-66ab-4a4f-968d-d6929328e879/export {"uuid": "a3cd49d3-66ab-4a4f-968d-d6929328e879", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "seen", "source": "https://t.me/pphm_HackerNews/3523", "content": "\ud83d\udd34 Unpatched AhsayCBS Vulnerabilities Exploited in the Wild\n\nHackers have been exploiting two unpatched vulnerabilities in the AhsayCBS backup solution for remote code execution (RCE), cybersecurity firm Huntress warns.\n\nA centralized cloud backup server management console developed by Ahsay Systems, AhsayCBS provides backup policy, storage, and user management and is popular among MSPs and system integrators.\n\nTracked as CVE-2026-105133 and CVE-2026-105134, the exploited security defects allow attackers to manipulate arguments in certain functions of the tool to bypass authentication and inject OS commands.", "creation_timestamp": "2026-10-09T19:42:04.000000Z"} {"uuid": "a3cd49d3-66ab-4a4f-968d-d6929328e879", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "seen", "source": "https://t.me/pphm_HackerNews/3523", "content": "\ud83d\udd34 Unpatched AhsayCBS Vulnerabilities Exploited in the Wild\n\nHackers have been exploiting two unpatched vulnerabilities in the AhsayCBS backup solution for remote code execution (RCE), cybersecurity firm Huntress warns.\n\nA centralized cloud backup server management console developed by Ahsay Systems, AhsayCBS provides backup policy, storage, and user management and is popular among MSPs and system integrators.\n\nTracked as CVE-2026-105133 and CVE-2026-105134, the exploited security defects allow attackers to manipulate arguments in certain functions of the tool to bypass authentication and inject OS commands.", "creation_timestamp": "2026-10-09T19:42:04.000000Z"} https://vulnerability.circl.lu/sighting/a3cd49d3-66ab-4a4f-968d-d6929328e879/export Fri, 09 Oct 2026 19:42:04 +0000 https://vulnerability.circl.lu/sighting/1b827603-91a9-4ecd-a2d1-ad14ba8ccf8a/export {"uuid": "1b827603-91a9-4ecd-a2d1-ad14ba8ccf8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3523", "content": "\ud83d\udd34 Unpatched AhsayCBS Vulnerabilities Exploited in the Wild\n\nHackers have been exploiting two unpatched vulnerabilities in the AhsayCBS backup solution for remote code execution (RCE), cybersecurity firm Huntress warns.\n\nA centralized cloud backup server management console developed by Ahsay Systems, AhsayCBS provides backup policy, storage, and user management and is popular among MSPs and system integrators.\n\nTracked as CVE-2026-105133 and CVE-2026-105134, the exploited security defects allow attackers to manipulate arguments in certain functions of the tool to bypass authentication and inject OS commands.", "creation_timestamp": "2026-10-09T19:42:04.000000Z"} {"uuid": "1b827603-91a9-4ecd-a2d1-ad14ba8ccf8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3523", "content": "\ud83d\udd34 Unpatched AhsayCBS Vulnerabilities Exploited in the Wild\n\nHackers have been exploiting two unpatched vulnerabilities in the AhsayCBS backup solution for remote code execution (RCE), cybersecurity firm Huntress warns.\n\nA centralized cloud backup server management console developed by Ahsay Systems, AhsayCBS provides backup policy, storage, and user management and is popular among MSPs and system integrators.\n\nTracked as CVE-2026-105133 and CVE-2026-105134, the exploited security defects allow attackers to manipulate arguments in certain functions of the tool to bypass authentication and inject OS commands.", "creation_timestamp": "2026-10-09T19:42:04.000000Z"} https://vulnerability.circl.lu/sighting/1b827603-91a9-4ecd-a2d1-ad14ba8ccf8a/export Fri, 09 Oct 2026 19:42:04 +0000 https://vulnerability.circl.lu/sighting/7036e364-7fdc-4d15-9cdf-d722ec23ad9a/export {"uuid": "7036e364-7fdc-4d15-9cdf-d722ec23ad9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxhlvh72r62d", "content": "AhsayCBS\u306e\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u3068OS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027(CVE-2026-105133\u3001CVE-2026-105134)\u304c\u3001\u30d1\u30c3\u30c1\u672a\u9069\u7528\u306e\u72b6\u614b\u3067\u653b\u6483\u306b\u5229\u7528\u3055\u308c\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-10-09T18:24:52.495640Z"} {"uuid": "7036e364-7fdc-4d15-9cdf-d722ec23ad9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxhlvh72r62d", "content": "AhsayCBS\u306e\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u3068OS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027(CVE-2026-105133\u3001CVE-2026-105134)\u304c\u3001\u30d1\u30c3\u30c1\u672a\u9069\u7528\u306e\u72b6\u614b\u3067\u653b\u6483\u306b\u5229\u7528\u3055\u308c\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-10-09T18:24:52.495640Z"} https://vulnerability.circl.lu/sighting/7036e364-7fdc-4d15-9cdf-d722ec23ad9a/export Fri, 09 Oct 2026 18:24:52 +0000