AhsayCBS vulnerabilities

2 known vulnerabilities in AhsayCBS from Ahsay. 2 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  Ahsay AhsayCBS Command Injection Exploited

  CVE-2026-105134Oct 4, 2026AhsayEPSS 81.8%

  A flaw has been found in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os comman

• 7.3 High severity

  Ahsay AhsayCBS Improper Authentication Exploited

  CVE-2026-105133Oct 4, 2026AhsayEPSS 84.5%

  A vulnerability was detected in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Performing a manipulation of the argument random results in improper authe