Ahsay · AhsayCBS
Updated October 17, 2026
The `checkSysPwd` function in AhsayCBS does not properly verify authentication, enabling an attacker to bypass login by tampering with a random token. When combined with CVE‑2026‑105134, full remote code execution is achievable.
Bypassing authentication provides direct access to backup management functions, allowing data tampering, ransomware encryption of backups, or complete system takeover.
Install Ahsay’s authentication‑bypass patch; temporarily disable external API access and enforce strong network segmentation until remediation is complete.
More active vulnerabilities