Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

2 matching records, 2 with confirmed exploitation.

1. 90
   KEV NVD 28d ago

   Ahsay AhsayCBS Command Injection Vulnerability

   Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s…

   KEV · due 17 Oct 2026 (overdue) CVSS 10.0 EPSS 0.82 Fix available CVE-2026-105134 Ahsay
2. 82
   KEV NVD 28d ago

   Ahsay AhsayCBS Improper Authentication Vulnerability

   Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function. This vulnerability…

   KEV · due 17 Oct 2026 (overdue) CVSS 7.3 EPSS 0.79 Fix available CVE-2026-105133 Ahsay

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Ahsay&limit=100. RSS for this section: feed.xml.