Singaporean software firm Ahsay Backup has issued crucial updates for its AhsayCBS software to rectify two significant security vulnerabilities. These flaws have been previously exploited by cybercriminals to implant web shells and XMRig cryptocurrency miners on vulnerable systems.
Understanding the AhsayCBS Vulnerabilities
The identified vulnerabilities, labeled CVE-2026-105133 and CVE-2026-105134, can be combined by attackers to bypass authentication mechanisms and run unauthorized commands on affected platforms. This threat vector was highlighted in a recent study by Huntress, which documented instances of remote code execution leading to malicious deployments on compromised environments.
Earlier attempts to patch these vulnerabilities were made with the release of AhsayCBS versions 9.15.2.59 and 10.3.4.0 in August 2026. However, Ahsay has acknowledged that these updates did not fully resolve the security issues, necessitating further action.
Details of the New Security Updates
To tackle these vulnerabilities effectively, Ahsay has released new hotfixes: version 10.3.4.45 and version 9.15.2.70. The company urges immediate implementation of these patches to prevent potential exploitation and secure customer data. Ahsay also recommends rebooting servers post-application of these updates to ensure full protection.
Huntress has confirmed that the latest hotfix for AhsayCBS version 10.3.4.45 addresses the initial vulnerability exploited in attack chains, which remained a risk in prior versions of the software.
Government Response and Recommendations
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has responded to the ongoing exploitation by adding these vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. This action mandates federal agencies to apply the necessary patches by October 17, 2026, to mitigate potential security threats.
The swift release and application of these updates are critical in neutralizing the risks associated with these vulnerabilities, underscoring the importance of proactive cybersecurity measures to protect digital infrastructure.
As cyber threats continue to evolve, organizations are advised to stay vigilant and ensure their systems are up-to-date with the latest security patches.
