Threat actors are actively exploiting two patched vulnerabilities in AhsayCBS, tracked as CVE-2026-105133 and CVE-2026-105134, to achieve authentication bypass and remote code execution. The exploitation chain leads to the deployment of a Python-based implant capable of sandbox evasion. Administrators should apply the latest security patches immediately.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →