Vulnérabilité

CVE-2026-105134 activement exploitée : Ahsay AhsayCBS Command Injection

CISA KEV · 14 octobre 2026 à 20 h 00 · Gravité critique

Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s /rps/api/json/UpdateReceivers.do endpoint. This vulnerability can be chained with CVE-2026-105133.