CVE-2026-105133

Vendor

Ahsay

Product

AhsayCBS

CVSS

7.3

EPSS

0.79 (p100)

CISA KEV

added 14 Oct 2026, due 17 Oct 2026 (15d overdue)

Weakness

CWE-287

Exposure class

Email, Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 82
   KEV NVD 28d ago

   Ahsay AhsayCBS Improper Authentication Vulnerability

   Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function. This vulnerability…

   KEV · due 17 Oct 2026 (overdue) CVSS 7.3 EPSS 0.79 Fix available CVE-2026-105133 Ahsay
2. 65
   CISA alert CISA 17d ago

   CISA Adds Four Known Exploited Vulnerabilities to Catalog

   CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-0322 Palo Alto Networks PAN-OS Code Injection Vulnerability CVE-2026-76519 Cisco…

   Exploited CVE-2026-0322CVE-2026-76519CVE-2026-105133+1 more Cisco Palo Alto Networks
3. 29
   Research Huntress 23d ago

   Threat Actors Exploit Critical AhsayCBS Flaws to Drop Webshells and XMRig Cryptominer

   Threat actors are exploiting AhsayCBS flaws, including CVE-2026-105133 and CVE-2026-105134, to deploy webshells and XMRig cryptominers. Update to 10.3.4 and restrict access now.

   EPSS 0.79 CVE-2026-105133CVE-2026-105134