AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches

Reported by The Hacker News ([email protected] (The Hacker News))

Summary by Cyber Security News15 Oct 2026, 08:43 CEST

About this summary. This is a short, independently written summary of an article first published by The Hacker News. Cyber Security News did not report or verify the underlying story. Read the original: https://thehackernews.com/2026/10/ahsaycbs-flaws-exploited-to-deploy-web.html

Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells and XMRig cryptocurrency miners. The vulnerabilities in question are CVE-2026-105133 and CVE-2026-105134, which could be chained to sidestep authentication and execute arbitrary commands on affected systems. In a report published earlier

Read the full article at The Hacker News →

Source attribution: headline and facts are from The Hacker News (thehackernews.com). Summary method: excerpt of the source description. See our source attribution policy.