Research

Threat Actors Exploit Critical AhsayCBS Flaws to Drop Webshells and XMRig Cryptominer

Threat actors are exploiting AhsayCBS flaws, including CVE-2026-105133 and CVE-2026-105134, to deploy webshells and XMRig cryptominers. Update to 10.3.4 and restrict access now.

Read at Huntress

EPSS

0.79 (p100)

• Huntress (huntress.com)
• CVE-2026-105133 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-105134 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 65
   CISA alert CISA 17d ago

   CISA Adds Four Known Exploited Vulnerabilities to Catalog

   Exploited CVE-2026-0322CVE-2026-76519CVE-2026-105133+1 more Cisco Palo Alto Networks
2. 90
   KEV NVD 28d ago

   Ahsay AhsayCBS Command Injection Vulnerability

   KEV · due 17 Oct 2026 (overdue) CVSS 10.0 EPSS 0.82 Fix available CVE-2026-105134 Ahsay
3. 82
   KEV NVD 28d ago

   Ahsay AhsayCBS Improper Authentication Vulnerability

   KEV · due 17 Oct 2026 (overdue) CVSS 7.3 EPSS 0.79 Fix available CVE-2026-105133 Ahsay