Vendor

Ahsay

Follow AhsayFree accountCovers every Ahsay product. No need to list them.

2 known exploited

Ahsay news

CriticalAct nowExploitedCISA KEV

Ahsay AhsayCBS Command Injection Vulnerability (CVE-2026-105134) is being actively exploited, CISA warns

CISA added CVE-2026-105134 (Ahsay AhsayCBS) to its Known Exploited Vulnerabilities catalog on October 14, 2026, which means there is reliable evidence of exploitation in the wild. Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s…

Why it matters

CISA lists this as exploited in the wild. Unpatched AhsayCBS and PAN-OS / GlobalProtect systems are exposed to active attacks now.

Act now

Treat this as an emergency.

CISA Known Exploited Vulnerabilities · 3 sources

Government advisoryCISA Known Exploited Vulnerabilities
Government advisoryCISA Known Exploited Vulnerabilities
Government advisoryCISA Cybersecurity Advisories

10 hours agoEnterpriseDevelopers

CriticalAct nowExploitedCISA KEV

Unpatched AhsayCBS Vulnerabilities Exploited in the Wild

The flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands.

Why it matters

Source reporting says attackers are already exploiting this, so exposed Microsoft Edge systems are at immediate risk.

Act now

Treat this as an emergency.

SecurityWeek · 2 sources

Original reportingSecurityWeek
Additional reportingThe Hacker News

5 days agoHomeSMBDevelopers+1

Recent intelligence

The latest developments from the last 30 days, newest first.

AdvisoryKEVOct 14, 2026
Ahsay AhsayCBS Command Injection Vulnerability (CVE-2026-105134) is being actively exploited, CISA warns
Basis: CISA Known Exploited Vulnerabilities (government advisory)
Added to CISA KEVUpdateCVE-2026-105134Oct 14, 2026
CVE-2026-105134 added to CISA KEV: Ahsay AhsayCBS, Ahsay AhsayCBS Command Injection Vulnerability
Basis: CISA Known Exploited Vulnerabilities catalog
Added to CISA KEVUpdateCVE-2026-105133Oct 14, 2026
CVE-2026-105133 added to CISA KEV: Ahsay AhsayCBS, Ahsay AhsayCBS Improper Authentication Vulnerability
Basis: CISA Known Exploited Vulnerabilities catalog