Threat Pulse 62High
AhsayCBS backup flaws (CVE-2026-105134) exploited in ransomware attacks
Severity 6ActiveconfirmedWeb servers and gateways

AhsayCBS backup flaws (CVE-2026-105134) exploited in ransomware attacks

· 5 days ago · thehackernews.com
Sourcesthehackernews.com
On X
@ShadowserververifiedNov 9, 13:28 UTC

We are also sharing vulnerable Ahsay AhsayCBS CVE-2026-105134 instances. We are aware of the vulnerability being used in ransomware attacks - so despite only 22 currently remaining vulnerable - if you receive an alert from us please investigate, filter traffic

Open on X
@TheHackersNewsverifiedNov 10, 16:30 UTC

🚨 Attackers exploited two AhsayCBS flaws to compromise backup servers. The intrusion involved payloads hidden in PNG images, crypto miners, and a Python backdoor designed to avoid sandbox analysis. A related Veeam server also saw a credential query. Full at

Open on X
Why this score

Plan rubric with caps (verified sweep, Nov 11)

Back to the board

Updated Nov 14, 03:49 UTC. Refreshes on its own.

Add a threat

Paste a link to an advisory, an article or an X post. A person reads every submission before it shows; nothing posts on its own.

Share

The picture people see when the link is posted
Post on XSave picture

This picture is what X, iMessage, Slack and Facebook show under the link. It is drawn fresh from the live board: the board and chart pictures update every 10 minutes, an event picture follows that event.