AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches

Singapore-based Ahsay Backup has released security updates to address two critical vulnerabilities in AhsayCBS (CVE-2026-105133 and CVE-2026-105134). These flaws have been actively exploited by threat actors to deploy web shells and XMRig cryptocurrency miners on affected systems. The vulnerabilities can be chained together to bypass authentication and execute arbitrary commands. New patches have been issued after initial fixes were found to be incomplete. The exploitation of these flaws highlights the risk of backup software being targeted as an attack vector. Organizations using AhsayCBS are urged to apply the latest security updates immediately.