CVE-2026-105133 — Vulnerability intelligence

Ahsay — AhsayCBS

Published: 2026-10-04T05:15:14.561Z

CVSS

6.9

CISA KEV

Known exploitation

Original source text (not a translation)

Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function. This vulnerability can be chained with CVE-2026-105134.

Sources

• Ahsay AhsayCBS Improper Authentication Vulnerability
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• CVE-2026-105133