CVE-2026-105134 Ahsay AhsayCBS
A flaw has been found in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os…
- CVSS
- 10.0 Critical
- EPSS
- 82%
- Percentile
- 100
- Published
- 2026-10-04
- Force
- 11 of 12
- Public PoC
- 1
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A
On CISA’s exploited list
Ahsay AhsayCBS Command Injection Vulnerability
- Added
- 2026-10-14
- Federal patch deadline
- 2026-10-17
- Ransomware use
- not known