> TritonInfoSec News
Home / Oct 11, 2026 / Story
0
#4 SecurityWeek general October 09, 2026 at 10:23 UTC

Unpatched AhsayCBS Vulnerabilities Exploited in the Wild

By Ionut Arghire

AI Summary

Two unpatched vulnerabilities in AhsayCBS backup management software — CVE-2026-105133 (authentication bypass) and CVE-2026-105134 (OS command injection) — are being actively exploited in the wild to deploy webshells and cryptocurrency miners. The combination of authentication bypass with command injection on backup infrastructure represents a critical exposure for affected organizations.

Read full article → https://www.securityweek.com/unpatched-ahsaycbs-vu…

Relevance score: 88.0/100

# More from October 11

  1. 1
    FBI Arrests Founder of Ransomware Negotiation Firm Krebs on Security
  2. 2
    Germany arrests alleged core Qilin ransomware member after extradition BleepingComputer
  3. 3
    Citrix warns admins to patch new NetScaler RCE flaw immediately BleepingComputer
  4. 5
    Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories The Hacker News
  5. 6
    Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own The Hacker News
  6. 7
    US Disrupts Chinese State-Sponsored Hacking Tools SecurityWeek
  7. 8
    GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys The Hacker News
  8. 9
    Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries SecurityWeek
  9. 10
    Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws The Hacker News