https://www.phllaps.net/tags/ahsay/ Recent content in Ahsay on PhllapsNET Hugo en-gb Wed, 14 Oct 2026 00:00:00 +0000 https://www.phllaps.net/posts/ahsay-ahsaycbs-command-injection-vulnerability/ Wed, 14 Oct 2026 00:00:00 +0000 https://www.phllaps.net/posts/ahsay-ahsaycbs-command-injection-vulnerability/ <div style="background:#b91c1c;color:white;padding:16px 18px;border-radius:14px;font-weight:800;font-size:18px;display:flex;align-items:center;gap:12px;box-shadow:0 10px 24px rgba(0,0,0,0.18);"><span style="font-size:24px;">🚨</span><span>SEVERITY: CRITICAL — CVSS 10.0</span><span style="opacity:0.95;font-weight:700;margin-left:auto;">Security Advisory</span></div> <h2 id="tldr-">TL;DR 📌</h2> <ul> <li>Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s /rps/api/json/UpdateReceivers.do endpoint. This vulnerability can be chained with CVE-2026-105133.</li> <li>Highest CVSS: <strong>10.0 (Critical)</strong>.</li> <li><strong>Listed in CISA KEV</strong> (2026-10-14) — this is being exploited in the wild.</li> <li><strong>Check the advisory for fixed releases</strong> — remediation detail is in the vendor link below.</li> <li>CVEs: CVE-2026-105134.</li> </ul> <h2 id="what-it-is">What it is</h2> <p>Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s /rps/api/json/UpdateReceivers.do endpoint. This vulnerability can be chained with CVE-2026-105133.</p> https://www.phllaps.net/posts/ahsay-ahsaycbs-improper-authentication-vulnerability/ Wed, 14 Oct 2026 00:00:00 +0000 https://www.phllaps.net/posts/ahsay-ahsaycbs-improper-authentication-vulnerability/ <div style="background:#dc2626;color:white;padding:16px 18px;border-radius:14px;font-weight:800;font-size:18px;display:flex;align-items:center;gap:12px;box-shadow:0 10px 24px rgba(0,0,0,0.18);"><span style="font-size:24px;">🚨</span><span>SEVERITY: HIGH — CVSS 7.3</span><span style="opacity:0.95;font-weight:700;margin-left:auto;">Security Advisory</span></div> <h2 id="tldr-">TL;DR 📌</h2> <ul> <li>Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function. This vulnerability can be chained with CVE-2026-105134.</li> <li>Highest CVSS: <strong>7.3 (High)</strong>.</li> <li><strong>Listed in CISA KEV</strong> (2026-10-14) — this is being exploited in the wild.</li> <li><strong>Check the advisory for fixed releases</strong> — remediation detail is in the vendor link below.</li> <li>CVEs: CVE-2026-105133.</li> </ul> <h2 id="what-it-is">What it is</h2> <p>Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function. This vulnerability can be chained with CVE-2026-105134.</p>