NewsThe Hacker News2026-10-09 12:47 UTCSME Finance Public Sector

Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge

Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices and deploy web shells and XMRig cryptocurrency miners. Details of the flaws are below - CVE-2026-105133 (CVSS v4 score: 5.5) - An improper authentication vulnerability in the checkSysPwd() function in the "com/ahsay/obs/api/ApiStructsAction.java"

CVE-2026-105133Sicherheitsluecke -- CVE-2026-105133
CVE-2026-105133In Ahsay AhsayCBS bis Version 10.

Other advisories

CVE-2026-105134none
In Ahsay AhsayCBS bis Version 10.
CVE-2026-105133none
In Ahsay AhsayCBS bis Version 10.

Other news entries

Newsbleepingcomputer2026-10-09
Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto
Newssecurityweek2026-10-09
Unpatched AhsayCBS Vulnerabilities Exploited in the Wild

Source: https://thehackernews.com/2026/10/attackers-exploit-ahsaycbs-flaws-to.html

Linked advisories

More on AhsayCBS