AhsayCBS flaws exploited to deploy Python backdoors and web shells
Ahsay released patches for two vulnerabilities in AhsayCBS, CVE-2026-105133 and CVE-2026-105134, following active exploitation in the wild. Attackers are using these flaws to bypass authentication and execute commands to deploy web shells, miners, and a sandbox-evading Python backdoor. Upgrade your AhsayCBS instance immediately.
CVE-2026-105133CVE-2026-1051342 min