Attackers chained two AhsayCBS bugs to run code and install a miner
Huntress says attackers started exploiting CVE-2026-105133 and CVE-2026-105134 in AhsayCBS on October 7, 2026, after the flaws were disclosed on October 4. They ran code, planted webshells, and installed a cryptominer.