https://vulnerability.circl.lu/sightings/feed 2026-10-10T04:25:01.695966+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/5d661554-934b-40f7-80e6-9a67c19cf486/export 2026-10-10T04:25:01.721479+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "5d661554-934b-40f7-80e6-9a67c19cf486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mxi62jhkyv2o", "content": "AhsayCBS flaws CVE-2026-105133 and CVE-2026-105134 reportedly face exploitation. Restrict unnecessary access and check vendor guidance. The supplied report describes them as unpatched; no fixed build is given. https://cti.securitycyber.uk", "creation_timestamp": "2026-10-09T23:49:49.990169Z"} 2026-10-09T23:49:49.990169+00:00 https://vulnerability.circl.lu/sighting/c4b6e430-1803-4397-8095-6bcc233e4c72/export 2026-10-10T04:25:01.723920+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c4b6e430-1803-4397-8095-6bcc233e4c72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44849", "content": "Unpatched AhsayCBS Vulnerabilities Exploited in the Wild\n\nThe flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands.\nThe post Unpatched AhsayCBS Vulnerabilities Exploited in the Wild appeared first on SecurityWeek.\nhttps://www.securityweek.com/unpatched-ahsaycbs-vulnerabilities-exploited-in-the-wild/", "creation_timestamp": "2026-10-09T23:00:48.000000Z"} 2026-10-09T23:00:48+00:00 https://vulnerability.circl.lu/sighting/8e22fa7e-e2e2-43f4-933f-d789edf18821/export 2026-10-10T04:25:01.724061+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8e22fa7e-e2e2-43f4-933f-d789edf18821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxhsqktipj2g", "content": "\ud83e\udd16 Unpatched AhsayCBS backup platform flaws (incl. CVE-2026-105133) exploited in the wild: webshells + XMRig miners disguised as Microsoft Edge. No patch yet.\nhttps://www.bleepingcomputer.com/news/security/unpatched-ahsaycbs-flaws-exploited-to-deploy-webshells-mine-crypto/", "creation_timestamp": "2026-10-09T20:27:24.778207Z"} 2026-10-09T20:27:24.778207+00:00 https://vulnerability.circl.lu/sighting/7036e364-7fdc-4d15-9cdf-d722ec23ad9a/export 2026-10-10T04:25:01.724172+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7036e364-7fdc-4d15-9cdf-d722ec23ad9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxhlvh72r62d", "content": "AhsayCBS\u306e\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u3068OS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027(CVE-2026-105133\u3001CVE-2026-105134)\u304c\u3001\u30d1\u30c3\u30c1\u672a\u9069\u7528\u306e\u72b6\u614b\u3067\u653b\u6483\u306b\u5229\u7528\u3055\u308c\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-10-09T18:24:52.495640Z"} 2026-10-09T18:24:52.495640+00:00 https://vulnerability.circl.lu/sighting/1692a3f4-2266-43af-82f5-4f37c312d000/export 2026-10-10T04:25:01.724276+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "1692a3f4-2266-43af-82f5-4f37c312d000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "exploited", "source": "https://t.me/information_security_channel/56078", "content": "Unpatched AhsayCBS Vulnerabilities Exploited in the Wild\nhttps://www.securityweek.com/unpatched-ahsaycbs-vulnerabilities-exploited-in-the-wild/\n\nThe flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands.\nThe post Unpatched AhsayCBS Vulnerabilities Exploited in the Wild (https://www.securityweek.com/unpatched-ahsaycbs-vulnerabilities-exploited-in-the-wild/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-10-09T10:48:08.000000Z"} 2026-10-09T10:48:08+00:00 https://vulnerability.circl.lu/sighting/adb2ba38-d03b-4797-ba84-9fe81b7f2f92/export 2026-10-10T04:25:01.724379+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "adb2ba38-d03b-4797-ba84-9fe81b7f2f92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxgmgialfc26", "content": "Threat Actors Exploit Critical AhsayCBS Flaws to Drop Webshells and XMRig Cryptominer\n\nThreat actors are exploiting critical AhsayCBS flaws, including CVE-2026-105133 and CVE-2026-105134, to deploy webshells and XMRig ... https://threatintel.cc/2026/10/09/threat-actors-exploit-critical-ahsaycbs.html", "creation_timestamp": "2026-10-09T09:01:44.951271Z"} 2026-10-09T09:01:44.951271+00:00 https://vulnerability.circl.lu/sighting/e4b1f949-0eb3-4e6f-ac89-a7dc915ab9c8/export 2026-10-10T04:25:01.724477+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e4b1f949-0eb3-4e6f-ac89-a7dc915ab9c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/117410136266256277", "content": "Threat Actors Exploit Critical AhsayCBS Flaws to Drop Webshells and XMRig Cryptominer\nThreat actors are exploiting critical AhsayCBS flaws, including CVE-2026-105133 and CVE-2026-105134, to deploy webshells and XMRig cryptominers, Huntress reports. Administrators are urged to update to version 10.3.4 and restrict access to exposed servers. https://www.huntress.com/blog/ahsaycbs-flaws-exploit", "creation_timestamp": "2026-10-09T09:01:43.588594Z"} 2026-10-09T09:01:43.588594+00:00 https://vulnerability.circl.lu/sighting/a8c59938-ac9f-41a8-a22b-d1f069cec299/export 2026-10-10T04:25:01.724583+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a8c59938-ac9f-41a8-a22b-d1f069cec299", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mx2ewk5f6z2j", "content": "AhsayCBS v10.3.2\u4ee5\u524d\u306eAPI\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u3067\u3001\u5f15\u6570random\u306e\u64cd\u4f5c\u306b\u3088\u308a\u8a8d\u8a3c\u4e0d\u5099\u306e\u8106\u5f31\u6027\u304c\u898b\u3064\u304b\u308a\u307e\u3057\u305f\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u653b\u6483\u304c\u53ef\u80fd\u3067\u3001\u5df2\u306b\u516c\u958b\u3055\u308c\u3066\u3044\u307e\u3059\u3002\nCVE-2026-105133 CVSS 7.3 | HIGH", "creation_timestamp": "2026-10-04T12:15:37.995309Z"} 2026-10-04T12:15:37.995309+00:00