CISA Adds AhsayCBS Improper Authentication Vulnerability to KEV List

## Overview CISA added CVE-2026-105133 to its Known Exploited Vulnerabilities (KEV) list on October 14, 2026. This vulnerability affects AhsayCBS versions up to 10.3.2. It allows remote attackers to bypass authentication by manipulating the random parameter in the checkSysPwd function. ## Technical Details The vulnerability resides in the API component of AhsayCBS, specifically in the file com/ahsay/obs/api/ApiStructsAction.java. By altering the random argument, an attacker can exploit improper authentication mechanisms. The exploit is now public, raising the urgency for organizations to address it. ## Impact Successful exploitation of this vulnerability can lead to unauthorized access to the AhsayCBS system. This could allow attackers to perform actions that require authentication, potentially compromising sensitive data and system integrity. The vulnerability can also be chained with CVE-2026-105134, amplifying its impact. ## Mitigation Organizations using AhsayCBS should upgrade to version 10.3.4 to mitigate this vulnerability. Regularly review and apply security updates to ensure that systems are protected against known vulnerabilities. Additionally, monitor for any unusual activity that may indicate exploitation attempts.