Vulnerability
Published 2026-10-14
Verified 2026-10-24
Ahsay AhsayCBS (CVE-2026-105133)
Ahsay AhsayCBS Improper Authentication Vulnerability. Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function. This vulnerability can be chained with CVE-2026-105134. Apply vendor mitigations.
Check the NVD record and the vendor advisory for affected versions and the patch.
- Product
- Ahsay AhsayCBS
- Exploited in Australia?
- unknown
- Primary: NVD
- Vendor: CISA KEV
- CVE: CVE-2026-105133, CVE-2026-105134