Vulnerabilities
2026-11-11 · just now
Source: The Hacker News
Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor
Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor
Summary
Cybersecurity researchers have disclosed details of an attack that exploited two now-patched vulnerabilities in AhsayCBS to deliver a Python-based implant. The activity, observed by Huntress in October 2026, involves the exploitation of a chain comprising CVE-2026-105133 and CVE-2026-105134 to bypass authentication and execute arbitrary commands on affected systems. Patches for the two
For more information, read the full story at the original source: The Hacker News ↗