{"vulnerability": "CVE-2026-105133", "sightings": [{"uuid": "a8c59938-ac9f-41a8-a22b-d1f069cec299", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mx2ewk5f6z2j", "content": "AhsayCBS v10.3.2\u4ee5\u524d\u306eAPI\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u3067\u3001\u5f15\u6570random\u306e\u64cd\u4f5c\u306b\u3088\u308a\u8a8d\u8a3c\u4e0d\u5099\u306e\u8106\u5f31\u6027\u304c\u898b\u3064\u304b\u308a\u307e\u3057\u305f\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u653b\u6483\u304c\u53ef\u80fd\u3067\u3001\u5df2\u306b\u516c\u958b\u3055\u308c\u3066\u3044\u307e\u3059\u3002\nCVE-2026-105133 CVSS 7.3 | HIGH", "creation_timestamp": "2026-10-04T12:15:37.995309Z"}, {"uuid": "e4b1f949-0eb3-4e6f-ac89-a7dc915ab9c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/117410136266256277", "content": "Threat Actors Exploit Critical AhsayCBS Flaws to Drop Webshells and XMRig Cryptominer\nThreat actors are exploiting critical AhsayCBS flaws, including CVE-2026-105133 and CVE-2026-105134, to deploy webshells and XMRig cryptominers, Huntress reports. Administrators are urged to update to version 10.3.4 and restrict access to exposed servers. https://www.huntress.com/blog/ahsaycbs-flaws-exploit", "creation_timestamp": "2026-10-09T09:01:43.588594Z"}, {"uuid": "adb2ba38-d03b-4797-ba84-9fe81b7f2f92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxgmgialfc26", "content": "Threat Actors Exploit Critical AhsayCBS Flaws to Drop Webshells and XMRig Cryptominer\n\nThreat actors are exploiting critical AhsayCBS flaws, including CVE-2026-105133 and CVE-2026-105134, to deploy webshells and XMRig ... https://threatintel.cc/2026/10/09/threat-actors-exploit-critical-ahsaycbs.html", "creation_timestamp": "2026-10-09T09:01:44.951271Z"}, {"uuid": "1692a3f4-2266-43af-82f5-4f37c312d000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "exploited", "source": "https://t.me/information_security_channel/56078", "content": "Unpatched AhsayCBS Vulnerabilities Exploited in the Wild\nhttps://www.securityweek.com/unpatched-ahsaycbs-vulnerabilities-exploited-in-the-wild/\n\nThe flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands.\nThe post Unpatched AhsayCBS Vulnerabilities Exploited in the Wild (https://www.securityweek.com/unpatched-ahsaycbs-vulnerabilities-exploited-in-the-wild/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-10-09T10:48:08.000000Z"}, {"uuid": "7036e364-7fdc-4d15-9cdf-d722ec23ad9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxhlvh72r62d", "content": "AhsayCBS\u306e\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u3068OS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027(CVE-2026-105133\u3001CVE-2026-105134)\u304c\u3001\u30d1\u30c3\u30c1\u672a\u9069\u7528\u306e\u72b6\u614b\u3067\u653b\u6483\u306b\u5229\u7528\u3055\u308c\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-10-09T18:24:52.495640Z"}, {"uuid": "8e22fa7e-e2e2-43f4-933f-d789edf18821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxhsqktipj2g", "content": "\ud83e\udd16 Unpatched AhsayCBS backup platform flaws (incl. CVE-2026-105133) exploited in the wild: webshells + XMRig miners disguised as Microsoft Edge. No patch yet.\nhttps://www.bleepingcomputer.com/news/security/unpatched-ahsaycbs-flaws-exploited-to-deploy-webshells-mine-crypto/", "creation_timestamp": "2026-10-09T20:27:24.778207Z"}, {"uuid": "5d661554-934b-40f7-80e6-9a67c19cf486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mxi62jhkyv2o", "content": "AhsayCBS flaws CVE-2026-105133 and CVE-2026-105134 reportedly face exploitation. Restrict unnecessary access and check vendor guidance. The supplied report describes them as unpatched; no fixed build is given. https://cti.securitycyber.uk", "creation_timestamp": "2026-10-09T23:49:49.990169Z"}, {"uuid": "c4b6e430-1803-4397-8095-6bcc233e4c72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44849", "content": "Unpatched AhsayCBS Vulnerabilities Exploited in the Wild\n\nThe flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands.\nThe post Unpatched AhsayCBS Vulnerabilities Exploited in the Wild appeared first on SecurityWeek.\nhttps://www.securityweek.com/unpatched-ahsaycbs-vulnerabilities-exploited-in-the-wild/", "creation_timestamp": "2026-10-09T23:00:48.000000Z"}, {"uuid": "f1640fec-8cd5-4faa-80b9-3d5006879b8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mxiwqpdjau2p", "content": "Same story, different day, as unpatched AhsayCBS flaws CVE-2026-105133 and CVE-2026-105134 get actively hammered in the wild. This calamity falls directly upon AhsayCBS administrators who dared to hope their backup servers might require actual logins. Defending ourselves against ...\n\nRead full story", "creation_timestamp": "2026-10-10T07:11:44.068612Z"}, {"uuid": "3ea2ffbb-78e3-4068-8ea0-95f58dadcb4d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105133", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b2b7b8c9-bd9b-42a5-9b74-32ea88ff338f", "content": "", "creation_timestamp": "2026-10-10T10:00:35.096415Z"}]}