Unpatched AhsayCBS Flaws Exploited to Deploy Webshells and Crypto Miners
Threat actors are exploiting two unpatched vulnerabilities (CVE-2026-105133 and CVE-2026-105134) in the AhsayCBS backup platform to bypass authentication, inject OS commands, and install webshells and XMRig cryptocurrency miners disguised as Microsoft Edge.
3outlets
3articles
7 hoursrunning
Oct 9first seen
Coverage over time
Articles
| Oct 9, 10:17 AM | bleepingcomputer.com | Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto |
| Oct 9, 5:47 AM | thehackernews.com | Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge |
| Oct 9, 3:23 AM | securityweek.com | Unpatched AhsayCBS Vulnerabilities Exploited in the Wild |