Intelligence online17 sources monitored18 actively exploited 7d47 published 24hChecked recently
Product

AhsayCBS

Made by Ahsay. 2 of its vulnerabilities are known to have been exploited.

Coverage

CriticalAct nowExploitedCISA KEV

Ahsay AhsayCBS Command Injection Vulnerability (CVE-2026-105134) is being actively exploited, CISA warns

CISA added CVE-2026-105134 (Ahsay AhsayCBS) to its Known Exploited Vulnerabilities catalog on October 14, 2026, which means there is reliable evidence of exploitation in the wild. Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s…

Why it matters

CISA lists this as exploited in the wild. Unpatched AhsayCBS and PAN-OS / GlobalProtect systems are exposed to active attacks now.

Act now

Treat this as an emergency.

CISA Known Exploited Vulnerabilities · 3 sources
EnterpriseDevelopers
CriticalAct nowExploitedCISA KEV

Unpatched AhsayCBS Vulnerabilities Exploited in the Wild

The flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands.

Why it matters

Source reporting says attackers are already exploiting this, so exposed Microsoft Edge systems are at immediate risk.

Act now

Treat this as an emergency.

SecurityWeek · 2 sources
HomeSMBDevelopers+1

Recent intelligence

The latest developments from the last 30 days, newest first.

  1. AdvisoryKEV

    Ahsay AhsayCBS Command Injection Vulnerability (CVE-2026-105134) is being actively exploited, CISA warns

    Basis: CISA Known Exploited Vulnerabilities (government advisory)

  2. Added to CISA KEVUpdateCVE-2026-105134

    CVE-2026-105134 added to CISA KEV: Ahsay AhsayCBS, Ahsay AhsayCBS Command Injection Vulnerability

    Basis: CISA Known Exploited Vulnerabilities catalog

  3. Added to CISA KEVUpdateCVE-2026-105133

    CVE-2026-105133 added to CISA KEV: Ahsay AhsayCBS, Ahsay AhsayCBS Improper Authentication Vulnerability

    Basis: CISA Known Exploited Vulnerabilities catalog

Actively exploited

CVE-2026-105133CVSS 5.5

Ahsay AhsayCBS

Ahsay AhsayCBS Improper Authentication Vulnerability

Added Oct 14, 2026Fed. due Oct 17, 2026Coverage →