Vulnerability
Published 2026-10-14
Verified 2026-10-17
Ahsay AhsayCBS (CVE-2026-105133)
Ahsay AhsayCBS Improper Authentication Vulnerability. Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function. This vulnerability can be chained with CVE-2026-105134. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
- Product
- Ahsay AhsayCBS
- Exploited in Australia?
- unknown
Primary: NVD · Vendor: CISA KEV · CVE: CVE-2026-105133, CVE-2026-105134