suspectedlowVulnerabilityFirst reported Oct 15, 2026

Ahsay: AhsayCBS flaws exploited to deploy web shells get new fixes

Ahsay Backup released security updates for two AhsayCBS vulnerabilities, CVE-2026-105133 and CVE-2026-105134, after earlier patches were incomplete. The flaws have been exploited in the wild to bypass authentication, execute arbitrary commands, and deploy web shells and XMRig cryptocurrency miners.

Members only

The full record: the timeline and 1 linked report

Every update as it happened, with the status at each step
Every report behind the record, newest first
Alerts the moment Ahsay Backup — or anything else you track — is hit again

A free account is all it takes — no card, one minute.

Create a free account Log in