Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor
Cybersecurity researchers have disclosed details of an attack that exploited two now-patched vulnerabilities in AhsayCBS to deliver a Python-based implant. The activity, observed by Huntress in October 2026, involves the exploitation of a chain comprising CVE-2026-105133 and CVE-2026-105134 to bypas
مصدر واحد حتى الآن — تحقّق من المصدر الأصلي. Single source so far — check the original source. حالة التحقق Verification status ملخص الثغرة Vulnerability summary ملخص المصدر (The Hacker News (RSS)): Source summary (The Hacker News (RSS)): Cybersecurity researchers have disclosed details of an attack that exploited two now-patched vulnerabilities in AhsayCBS to deliver a Python-based implant. The activity, observed by Huntress in October 2026, involves the exploitation of a chain comprising CVE-2026-105133 and CVE-2026-105134 to bypass authentication and execute arbitrary commands on affected systems. Patches for the two Cybersecurity researchers have disclosed details of an attack that exploited two now-patched vulnerabilities in AhsayCBS to deliver a Python-based implant. The activity, observed by Huntress in October 2026, involves the exploitation of a chain comprising CVE-2026-105133 and CVE-2026-105134 to bypass authentication and execute arbitrary commands on affected systems. Patches for the two CVE-2026-105133 CVE-2026-105133 غير متوفر n/a 84.48% 84.48% نعم (أُضيفت 2026-10-14) Yes (added 2026-10-14) Ahsay · AhsayCBS Ahsay · AhsayCBS CVE-2026-105134 CVE-2026-105134 غير متوفر n/a 81.76% 81.76% نعم (أُضيفت 2026-10-14) Yes (added 2026-10-14) Ahsay · AhsayCBS Ahsay · AhsayCBS CVSS = الشدة · EPSS = احتمال الاستغلال خلال 30 يومًا · KEV = استغلال مؤكد لدى CISA — مقاييس منفصلة لا تُدمج. CVSS = severity · EPSS = 30-day exploitation probability · KEV = confirmed exploitation (CISA