AhsayCBS Vulnerabilities Exploited for Cyber Attacks

Cybersecurity researchers have released details of an attack that exploited two vulnerabilities in the backup software AhsayCBS. These vulnerabilities, known as CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and execute arbitrary commands on affected systems. The attacks were discovered by Huntress in early October 2026. The vulnerabilities affect the software's authentication mechanisms, enabling unauthorized access for attackers. Researchers reported that the attackers implemented a Python-based backdoor capable of evading sandbox environments.

This poses a significant threat to businesses using AhsayCBS for data backup. The vulnerabilities were identified in version 8.0.0.0 of AhsayCBS. Developers have already released patches to close the security gaps. Companies using the software are strongly advised to install the latest updates to protect against potential attacks. The attacks have been identified as part of a larger campaign aimed at compromising critical infrastructures.

Huntress researchers have found that the attackers are specifically targeting companies that use AhsayCBS to infiltrate their systems. The use of Python for the backdoor is particularly concerning, as this language is frequently employed in cybercrime. The vulnerabilities have been classified as high-risk, as they allow attackers to gain complete control over the affected systems. Researchers have also noted that the attackers are capable of obfuscating their activities, making it difficult to detect their attacks. This could lead to an increase in data loss and financial damage for affected companies.

The discovery of these attacks has drawn the attention of security authorities worldwide. Experts warn that similar attacks may increase in the future, especially if companies do not proactively enhance their security measures. The need to implement security updates in a timely manner is considered crucial to ensure the integrity of corporate data. The vulnerabilities in AhsayCBS are not the first to be discovered in the software. There have been several reports of security issues in the past, highlighting the necessity for continuous monitoring and improvement of security practices.

The current situation may prompt companies to reconsider their backup solutions and consider alternative software. Huntress researchers have urged affected companies to check their systems for signs of an attack. This includes monitoring for unusual activities and conducting security audits. Implementing layered security measures is regarded as one of the best strategies to protect against such attacks. The patches for vulnerabilities CVE-2026-105133 and CVE-2026-105134 were released on November 5, 2026. Companies should ensure that they apply these updates promptly to safeguard their systems.