· python
AhsayCBS flaws exploited, Python backdoor deployed via CVE-2026-105133 and CVE-2026-105134
Security researchers have detailed an intrusion method that leveraged two vulnerabilities within AhsayCBS.
These flaws, which have since been patched, allowed an attacker to deploy a Python-based implant.
Huntress observed this malicious activity during October 2026.
The attack chain specifically utilized CVE-2026-105133 and CVE-2026-105134.
By chaining these specific CVEs, threat actors managed to circumvent authentication mechanisms.
Furthermore, this exploitation enabled the execution of arbitrary commands on compromised systems.
