CVE-2026-105134

Vendor

Ahsay

Product

AhsayCBS

CVSS

10.0

EPSS

0.82 (p100)

CISA KEV

added 14 Oct 2026, due 17 Oct 2026 (15d overdue)

Weakness

CWE-77, CWE-78

Exposure class

Email, Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 90
   KEV NVD 28d ago

   Ahsay AhsayCBS Command Injection Vulnerability

   Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s…

   KEV · due 17 Oct 2026 (overdue) CVSS 10.0 EPSS 0.82 Fix available CVE-2026-105134 Ahsay
2. 65
   CISA alert CISA 17d ago

   CISA Adds Four Known Exploited Vulnerabilities to Catalog

   CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-0322 Palo Alto Networks PAN-OS Code Injection Vulnerability CVE-2026-76519 Cisco…

   Exploited CVE-2026-0322CVE-2026-76519CVE-2026-105133+1 more Cisco Palo Alto Networks
3. 29
   Research Huntress 23d ago

   Threat Actors Exploit Critical AhsayCBS Flaws to Drop Webshells and XMRig Cryptominer

   Threat actors are exploiting AhsayCBS flaws, including CVE-2026-105133 and CVE-2026-105134, to deploy webshells and XMRig cryptominers. Update to 10.3.4 and restrict access now.

   EPSS 0.79 CVE-2026-105133CVE-2026-105134