Official catalog / vulnerabilities

CVE-2026-105133: Ahsay AhsayCBS Improper Authentication Vulnerability

Ccisa.govAdded to KEV 14 Oct 2026

FROM THE SOURCE

Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function. This vulnerability can be chained with CVE-2026-105134.

Source-provided description. Read the original for the full context.

Read the original

Sources

CISA KEVOfficial catalog

Related coverage

Linked by a shared CVE, not necessarily the same event.