Latest / The Digital Warfare Podcast
EP. 173: Critical Ahsay CVE-2026-105134 Enables Unauthenticated Remote Command Execution
Summary
A newly disclosed critical vulnerability tracked as CVE-2026-105134 affects the AhsayCBS Replication Receiver component.
The vulnerability carries a CVSS 3.1 score of 10.0 and can allow an unauthenticated remote attacker to inject operating-system commands by manipulating the random parameter sent to the /rps/api/json/UpdateReceivers.do endpoint.
AhsayCBS versions 10.3.0, 10.3.1 and 10.3.2 are affected. Version 10.3.4 contains the security fix. Technical exploit information is publicly available, but there is currently no confirmed evidence of exploitation in the wild.
Key Takeaways
•…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.