// tag
Ahsay
Security incidents tagged Ahsay. Newest first.
- incidents
- 1
- live
- 1
- patched
- 1
## 1 Ahsay incident in the last year
through Oct 22, 2026crit 4 · high 3 · med 2 · low 1 · upd ½severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½lessmore
highAhsay AhsayCBS: Ahsay AhsayCBS Command Injection Vulnerabilitypatched
› Ahsay AhsayCBS patched
Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s /rps/api/json/UpdateReceivers.do endpoint. This vulnerability can be chained with CVE-2026-105133. CISA added CVE-2026-105134, CVE-2026-105133 to the Known Exploited Vulnerabilities catalog on 2026-10-14 based on evidence of active exploitation.
open incident →CVE-2026-105134 · CVE-2026-105133