Known exploited vulnerabilities

Ahsay vulnerabilities attackers have used

Every Ahsay vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 2 Ahsay vulnerabilities as exploited in the wild, 2 of them added in the last 12 months. The most recent is CVE-2026-105134, added Oct 14, 2026. AhsayCBS has the most entries (2).

In KEV, all time
2
Added, last 12 months
2
Used in ransomware
0
New CVEs this week
0

Every Ahsay entry in CISA KEV

  1. CVE-2026-105134

    Added · due

    Ahsay AhsayCBS Command Injection Vulnerability

    Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s…

  2. CVE-2026-105133

    Added · due

    Ahsay AhsayCBS Improper Authentication Vulnerability

    Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function. This vulnerability can be…

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.