Unpatched AhsayCBS Flaws Exploited to Deploy Webshells, Mine Crypto
5 Articles
5 Articles
Attackers exploit AhsayCBS vulnerabilities to deploy webshells and miner XMRig, camouflaged as Microsoft Edge. Huntress identified two bugs, CVE-2026-105133 and CVE-2026-105134; the available information does not detail the victims or the scope of the campaign. *** The Hacker News reported on October 9 attacks on AhsayCBS to deploy XMRig disguised as Microsoft Edge. Huntress identified vulnerabilities such as CVE-2026-105133 and CVE-2026-105134,…
Threat Actors Exploit Critical AhsayCBS Flaws to Drop Webshells and XMRig Cryptominer
Acknowledgements: Special thanks to Dipo Rodipe, John Hammond, Susannah Matt, Ben Nahorney, and Lindsey Welch for their contributions to this investigation and writeup. Update 10/8/26 @ 6pm ETAfter further investigation, Huntress has determined that Ahsay 10.3.4 is also affected by these vulnerabilities. Previous reporting indicated that 10.3.4 was not susceptible; we have updated this writeup to
securityweek.com
IT Security News - cybersecurity, infosecurity newsUnpatched AhsayCBS Vulnerabilities Exploited in the Wild
The flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands.
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
