CTI · reviewed · 2026-10-09

CVE-2026-105134: Ahsay AhsayCBS critical OS command injection

Full story & timeline

MITRE ATT&CK

• T1190 Exploit Public-Facing Application Initial Access
• T1100 Web Shell Persistence
• T1496 Resource Hijacking Impact

Indicators

No curated indicators tied to this case.

Detections

No detection content yet — case analysis did not yield signal-specific telemetry. Check back after the next daily CTI pass.

References

• https://radar.offseq.com/threat/cve-2026-105134-os-command-injection-in-ahsay-ahsaycbs-a9df873cc55c0ce9
• https://radar.offseq.com/threat/a-flaw-has-been-found-in-ahsay-ahsaycbs-up-to-1032-cve-2026-105134-a9f0def985d0c48e
• https://www.huntress.com/blog/ahsaycbs-flaws-exploit
• https://securityonline.info/ahsaycbs-vulnerabilities-exploited/
• https://beyondmachines.net/event_details/threat-actors-chain-ahsaycbs-vulnerabilities-to-deploy-webshells-and-cryptominers-o-j-b-o-b/gD2P6Ple2L
• https://fawkes.rocks/2026/10/09/ahsaycbs-flaws-exploited-in-the-wild-no-patch-available/