AhsayCBS zero-days exploited to drop web shells and XMRig
Huntress reports active exploitation of two AhsayCBS flaws, CVE-2026-105133 and CVE-2026-105134, chained for unauthenticated RCE. The latest release 10.3.4 is still affected; no patch yet.
Huntress reports active exploitation of two AhsayCBS flaws, CVE-2026-105133 and CVE-2026-105134, chained for unauthenticated RCE. The latest release 10.3.4 is still affected; no patch yet.