Back to Search

CVE-2026-105133

High Known Exploited
Source: NVDCVSS: 7.3Published: October 4, 2026

Description

A vulnerability was detected in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Performing a manipulation of the argument random results in improper authentication. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading to version 9.15.2.70 and 10.…

CISA KEV Details

Name: Ahsay AhsayCBS Improper Authentication Vulnerability
Added to KEV: October 14, 2026
Remediation due: October 17, 2026

Threat Link Graph

(MISP Galaxy correlation)

Visualizes how this vulnerability connects to known threat actors, ransomware, exploit kits, and malware. Edge thickness reflects the number of shared characteristics. Click a node for details.

CVE-2026-105…This CVEUAC-0099Threat ActorPowerPoolThreat ActorCL-STA-1020Threat ActorStorm-2561Threat ActorEarth BaxiaThreat ActorPacha GroupThreat ActorEnduranceRansomwareUnnamed ramsomware 1RansomwareUnderminerExploit KitREPTILE - S1219Malware
Threat ActorRansomwareExploit KitMalware edge = shared characteristics

Select a node to view the threat's details and shared characteristics.

Threat Radar

(MISP Galaxy correlation)

Plots this vulnerability against active threat actors and campaigns. Each axis is a matched threat; the polygon reaches further where the CVE shares more characteristics with that threat. Hover an axis for details.

UAC-0099PowerPoolCL-STA-1020Storm-2561Earth BaxiaPacha GroupEnduranceUnnamed ramsomwar…
Threat ActorRansomware
View original source (NVD)