Official catalog / vulnerabilities

CVE-2026-105134: Ahsay AhsayCBS Command Injection Vulnerability

Ccisa.govAdded to KEV 14 Oct 2026

FROM THE SOURCE

Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s /rps/api/json/UpdateReceivers.do endpoint. This vulnerability can be chained with CVE-2026-105133.

Source-provided description. Read the original for the full context.

Read the original

Sources

CISA KEVOfficial catalog

Related coverage

Linked by a shared CVE, not necessarily the same event.