---
title: 'CISA adds two Ahsay AhsayCBS flaws to the KEV catalog'
url: 'https://securteksecurity.com/news/cisa-kev-ahsay-ahsaycbs-cve-2026-105133-105134'
markdown: 'https://securteksecurity.com/news/cisa-kev-ahsay-ahsaycbs-cve-2026-105133-105134.md'
date: '2026-10-14'
description: 'CISA has added two Ahsay AhsayCBS backup-server flaws (CVE-2026-105133 and CVE-2026-105134) to the Known Exploited Vulnerabilities catalog. Chained together, an authentication bypass and a command injection give an unauthenticated attacker remote code execution as SYSTEM. Exploitation has been obse…'
taxonomy:
  category:
    - Cybersecurity
---

# [CISA adds two Ahsay AhsayCBS flaws to the KEV catalog](https://securteksecurity.com/news/cisa-kev-ahsay-ahsaycbs-cve-2026-105133-105134)

   14th Oct 2026  

CISA has added two Ahsay AhsayCBS backup-server flaws (CVE-2026-105133 and CVE-2026-105134) to the Known Exploited Vulnerabilities catalog. Chained together, an authentication bypass and a command injection give an unauthenticated attacker remote code execution as SYSTEM.

Exploitation has been observed since October 7. Backup servers are high-value targets because they hold the keys to recovery; exposed AhsayCBS instances should be patched and reviewed first.

Sources: [CISA](https://www.cisa.gov/news-events/alerts/2026/10/14/cisa-adds-four-known-exploited-vulnerabilities-catalog), [SecurityWeek](https://www.securityweek.com/unpatched-ahsaycbs-vulnerabilities-exploited-in-the-wild/), [Horizon3.ai](https://horizon3.ai/attack-research/attack-blogs/ahsaycbs-cve-2026-105133-cve-2026-105134-technical-analysis/)

---

## Navigation

- Parent: [News](https://securteksecurity.com/news.md)
- Previous: [CISA adds two flaws to the KEV catalog: Adobe Commerce and Magento PolyShell and Google Brotli](https://securteksecurity.com/news/cisa-kev-adobe-magento-brotli-cve-2026-48356-111497.md)
- Next: [CISA adds Atlassian flaw to the KEV catalog (CVE-2026-21589)](https://securteksecurity.com/news/cisa-kev-atlassian-cve-2026-21589.md)