Back to all news
Security

AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches

The Hacker News·October 15, 2026·1 min read
AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches

Singapore-based Ahsay Backup has released security updates to address two flaws in AhsayCBS exploited by attackers to drop web shells and XMRig cryptocurrency miners. The vulnerabilities, CVE-2026-105133 and CVE-2026-105134, can be chained to bypass authentication and execute arbitrary commands on affected systems, according to a report published earlier.

Read at The Hacker News
Daily crypto arcade

Read the news, then play it.

Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.

Open ChainshortsGet it on the Solana dApp Store