Dark Web Intelligence on X: "🚨 CVSS 10 — UNAUTHENTICATED COMMAND INJECTION DISCLOSED IN AHSAY BACKUP SERVERS
A critical vulnerability has just been disclosed in:
AhsayCBS is centralized backup infrastructure used by enterprises and managed service providers.
The published attack characteristics are particularly concerning:
* No confirmed mass exploitation has been identified
* No working public PoC was found in major exploit repositories
* CVE-2026-105134 is not currently listed in CISA KEV
Backup infrastructure is an exceptionally valuable target.
Compromise of the backup control plane can potentially give an attacker access to:
For ransomware operators, destroying or compromising recovery capability before encryption can dramatically increase leverage.
Organizations and MSPs running AhsayCBS should inventory exposed instances and move to 10.3.4.
#Ahsay #AhsayCBS #CVE2026105134 #RCE #BackupSecurity #MSP #Ransomware #ThreatIntel #DDW"
🚨 CVSS 10 — UNAUTHENTICATED COMMAND INJECTION DISCLOSED IN AHSAY BACKUP SERVERS
A critical vulnerability has just been disclosed in:
AhsayCBS is centralized backup infrastructure used by enterprises and managed service providers.
The published attack characteristics are particularly concerning:
* No confirmed mass exploitation has been identified
* No working public PoC was found in major exploit repositories
* CVE-2026-105134 is not currently listed in CISA KEV
Backup infrastructure is an exceptionally valuable target.
Compromise of the backup control plane can potentially give an attacker access to:
For ransomware operators, destroying or compromising recovery capability before encryption can dramatically increase leverage.
Organizations and MSPs running AhsayCBS should inventory exposed instances and move to 10.3.4.
🚨 CVSS 10 — UNAUTHENTICATED COMMAND INJECTION DISCLOSED IN AHSAY BACKUP SERVERS
A critical vulnerability has just been disclosed in:
AhsayCBS is centralized backup infrastructure used by enterprises and managed service providers.
The published attack characteristics are particularly concerning:
* No confirmed mass exploitation has been identified
* No working public PoC was found in major exploit repositories
* CVE-2026-105134 is not currently listed in CISA KEV
Backup infrastructure is an exceptionally valuable target.
Compromise of the backup control plane can potentially give an attacker access to:
For ransomware operators, destroying or compromising recovery capability before encryption can dramatically increase leverage.
Organizations and MSPs running AhsayCBS should inventory exposed instances and move to 10.3.4.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
