CISA Adds AhsayCBS Vulnerability CVE-2026-105133 to KEV List

## Overview CISA has added CVE-2026-105133 to its Known Exploited Vulnerabilities (KEV) list. This vulnerability affects Ahsay AhsayCBS versions up to 10.3.2. It allows remote attackers to bypass authentication through manipulation of the random parameter in the API's checkSysPwd function. Evidence of exploitation is now public, prompting the federal deadline for remediation. ## Technical Details The vulnerability resides in the API component of AhsayCBS, specifically in the file com/ahsay/obs/api/ApiStructsAction.java. The function checkSysPwd is vulnerable due to improper authentication handling. By manipulating the random argument, attackers can exploit this flaw to gain unauthorized access. This vulnerability can be chained with CVE-2026-105134 for further exploitation. ## Impact Successful exploitation of CVE-2026-105133 allows attackers to bypass authentication mechanisms. This could lead to unauthorized access to sensitive data and system functionalities. Organizations using affected versions of AhsayCBS are at risk of remote attacks, which could compromise their security posture. ## Mitigation Ahsay has released version 10.3.4 to address this vulnerability. It is recommended that all users of AhsayCBS upgrade to this version immediately. Regularly updating software and monitoring for unusual activity can also help mitigate potential risks associated with this vulnerability.