Mmastodon TechnologyCybersecurity first seen 11 h ago, last 11 h ago, peak #10

AhsayCBS backup servers under active attack, no patch available

Original: 🔴 EXPLOITED AhsayCBS backup servers are under active attack. Two chained flaws give code execution as SYSTEM on an expos

Attackers are actively exploiting AhsayCBS backup servers by chaining two flaws that allow remote code execution as SYSTEM through an exposed console, with no login required. Even the latest version, 10.3.4, has no patch for the vulnerability tracked as CVE-2026-105134. Administrators are urged to restrict the console to trusted IPs or place it behind a VPN until a fix is released.

Why now: Backup servers are high-value targets, and an actively exploited flaw with no patch poses urgent risk to organisations worldwide

AhsayCBSCVE-2026-105134

Open on mastodon →

Evidence

• 🔴 EXPLOITED AhsayCBS backup servers are under active attack. Two chained flaws give code execution as SYSTEM on an exposed console, no login needed. The latest version, 10.3.4, has no patch. Fix: restrict the console to trusted IPs or VPN. (CVE-2026-105134) https://… · suriq@infosec.exchange · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/1842104