Unpatched AhsayCBS vulnerabilities are being exploited in the wild

Unpatched AhsayCBS vulnerabilities are being exploited in the wild

Hackers have exploited two unpatched vulnerabilities in the AhsayCBS remote code execution (RCE) backup solution, cybersecurity firm Huntress warns. AhsayCBS is a centralized cloud backup server management console developed by Ahsay Systems. It offers backup policies, storage and user management and is popular with MSPs and system integrators. Tracked as CVE-2026-105133 And CVE-2026-105134The exploited vulnerabilities … Read more

Unpatched AhsayCBS vulnerabilities are exploited to deploy webshells and mine cryptocurrencies

Unpatched AhsayCBS vulnerabilities are exploited to deploy webshells and mine cryptocurrencies

Threat actors are exploiting a critical and a medium-severity vulnerability that remain unpatched in the backup management platform AhsayCBS to deploy webshells and cryptocurrency miners. AhsayCBS is typically used by managed service providers (MSPs) and system integrators. The malicious activity was observed on October 7 and targeted at least five organizations. The two security issues … Read more