Skip to content

CVE-2026-105134

Named by 2 kept items in this workspace.

Search every workspace for CVE-2026-105134. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • Unpatched AhsayCBS Vulnerabilities Exploited in the Wild
    article2026-10-09

    Vulnerability in AhsayCBS's Replication Receiver component API allowing unauthenticated RCE with System privileges via authentication bypass where a random token can substitute valid credentials; exploited in the wild, chained with CVE-2026-105133

  • Threat Actors Exploit Critical AhsayCBS Flaws to Drop Webshells and XMRig Cryptominer
    writeup2026-10-08

    Critical-severity vulnerability affecting /rps/api/json/UpdateReceivers.do of the Replication Receiver component in AhsayCBS; exploitable for unauthenticated remote code execution as NT AUTHORITY/SYSTEM via an authentication bypass allowing a random token to substitute valid credentials. Used after

All cves in this workspace.