Vulnerability
Published 2026-10-14
Verified 2026-10-17
Ahsay AhsayCBS (CVE-2026-105134)
Ahsay AhsayCBS Command Injection Vulnerability. Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s /rps/api/json/UpdateReceivers.do endpoint. This vulnerability can be chained with CVE-2026-105133. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
- Product
- Ahsay AhsayCBS
- Exploited in Australia?
- unknown
Primary: NVD · Vendor: CISA KEV · CVE: CVE-2026-105134, CVE-2026-105133