CISA Adds AhsayCBS Command Injection Vulnerability to KEV List

## Overview CISA has added CVE-2026-105134 to its Known Exploited Vulnerabilities (KEV) list. This vulnerability affects AhsayCBS versions up to 10.3.2. It allows remote command injection through the Replication Receiver component. ## Technical Details The flaw resides in the file /rps/api/json/UpdateReceivers.do. By manipulating the 'random' parameter, an attacker can execute arbitrary operating system commands. The vulnerability is critical, with a CVSS score of 9.3. Evidence of exploitation has emerged, prompting CISA's action. ## Impact Successful exploitation can lead to unauthorized access and control over the affected system. This could allow attackers to execute commands that compromise the integrity and confidentiality of the system. Organizations using vulnerable versions are at high risk, especially with the potential for chaining with CVE-2026-105133. ## Mitigation Ahsay has released version 10.3.4 to address this vulnerability. Organizations should upgrade to this version immediately to protect against potential attacks. Regular updates and monitoring for new vulnerabilities are essential for maintaining security.