On 8 August 2026, Huntress released a report detailing the in-the-wild exploitation of AhsayCBS, an on-premises backup server application. The report described two vulnerabilities: By chaining the vulnerabilities together, attackers were observed writing webshells into the application filesystem, allowing them to execute commands as SYSTEM and root. On 12 October 2026… Source
AhsayCBS Deep-Dive: Auth Bypass to RCE
About this summary. This is a short, independently written summary of an article first published by Horizon3.ai. Cyber Security News did not report or verify the underlying story. Read the original: https://horizon3.ai/attack-research/attack-blogs/ahsaycbs-cve-2026-105133-cve-2026-105134-technical-analysis/
Source attribution: headline and facts are from Horizon3.ai (horizon3.ai). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting…
Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to…
NSD 4.15.3 security release
Posted by Willem Toorop on Oct 14 Several vulnerabilities were found in NSD. We released 4.15.3 as a security release on Wednesday 14 October including the relevant…
Palo Alto Networks security advisory (AV26-1041)
Serial number: AV26-1041 Date: October 14, 2026 As of October 14, 2026, Palo Alto Networks is affected by vulnerabilities in the following products: PAN-OS 12.2 Prior to…
Volexity Uncovers Stealthy Ivanti VPN Attack Using Three Zero-Day Vulnerabilities
Ivanti VPN zero-days let attackers gain root access, steal credentials, evade detection, and prepare for wider network compromise. On October 5, Volexity started…
Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for October 2026, which includes 1415 vulnerabilities affecting a range of products, including 85 that Microsoft…