AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches

Ahsay Backup has released security updates for two flaws in AhsayCBS, CVE-2026-105133 and CVE-2026-105134, that have been exploited to drop web shells and XMRig cryptocurrency miners. The vulnerabilities could be chained to bypass authentication and execute arbitrary commands, and the new fixes follow earlier incomplete patches.