AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches
Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells and XMRig cryptocurrency miners.
The vulnerabilities in question are CVE-2026-105133 and CVE-2026-105134, which could be chained to sidestep authentication and execute arbitrary commands on affected systems.
In a report published earlier
The post “AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches” appeared first on The Hacker News
Source:The Hacker News – [email protected] (The Hacker News)