WATCHExploited vulnerability
Ahsay AhsayCBS
Ahsay AhsayCBS Improper Authentication Vulnerability
What's happening and what to do
A remote attacker can bypass login checks in AhsayCBS by manipulating a parameter sent to its API, and this flaw is being actively exploited in the wild. Ahsay AhsayCBS; no fixed versions are listed, so this applies to all AhsayCBS deployments. Apply the vendor's update now and check for signs of compromise, including unexpected admin logins or new accounts.
AI summary of the sources on this page. Regenerated when a source changes.
Signals over time
- 2026-10-14Added to CISA's Known Exploited Vulnerabilities catalog.
- 2026-10-17Federal patch deadline for US agencies.
- 2026-11-03 21:55First seen here.
Source text
Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function. This vulnerability can be chained with CVE-2026-105134.