Ahsay Backup has released updated hotfixes for AhsayCBS addressing CVE-2026-105133 and CVE-2026-105134, following verification that previous August patches were incomplete.
The flaws allowed authentication bypass and unauthenticated remote code execution when chained.
New fixes are available in v10.3.4.45 and v9.15.2.70.
These issues allowed unknown individuals to bypass security controls and execute commands on affected systems remotely. Security researchers had observed that attackers were combining these vulnerabilities to secretly install control tools and programs used to mine cryptocurrency.
New corrections after incomplete measures
Although fixes were released in August 2026, the previous solutions were not complete. The new fixes are now available in AhsayCBS v10.3.4.45 hotfix and AhsayCBS v9.15.2.70 hotfix.
The company recommends that administrators immediately apply the updates and reboot their systems. Independent researchers have confirmed that the new update prevents the attackers from initially gaining entry.
READ ALSO
Serious security flaw in Palo Alto Networks systems allows complete remote control
Actions by the authorities
Due to the actual attacks that occurred, the United States' cybersecurity agency added the specific problems to a list of actively exploited vulnerabilities, asking government agencies to implement the fixes by October 17, 2026.
G
Hacks.gr on Google
Set it as a preferred source for cybersecurity updates.
Preferred source
Top comments (0)