Back to Search

CVE-2026-105134

Critical Known Exploited
Source: NVDCVSS: 10Published: October 4, 2026

Description

A flaw has been found in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. Upgrading to version 9.15.2.70 an…

CISA KEV Details

Name: Ahsay AhsayCBS Command Injection Vulnerability
Added to KEV: October 14, 2026
Remediation due: October 17, 2026

Threat Link Graph

(MISP Galaxy correlation)

Visualizes how this vulnerability connects to known threat actors, ransomware, exploit kits, and malware. Edge thickness reflects the number of shared characteristics. Click a node for details.

CVE-2026-105…This CVEUAT-8099Threat ActorEarth BaxiaThreat ActorUAC-0099Threat ActorPacha GroupThreat ActorPowerPoolThreat ActorFrankenstein - G0101CampaignMaui ransomwareRansomwarePrincess EvolutionRansomwareBoomBox - S0635MalwareKillDisk - S0607Malware
Threat ActorCampaignRansomwareMalware edge = shared characteristics

Select a node to view the threat's details and shared characteristics.

Threat Radar

(MISP Galaxy correlation)

Plots this vulnerability against active threat actors and campaigns. Each axis is a matched threat; the polygon reaches further where the CVE shares more characteristics with that threat. Hover an axis for details.

UAT-8099Earth BaxiaUAC-0099Pacha GroupPowerPoolFrankenstein - G0…Maui ransomwarePrincess Evolution
Threat ActorCampaignRansomware
View original source (NVD)