CVE-2026-105134 | Ahsay AhsayCBS up to 10.3.2 Replication Receiver UpdateReceivers.do Random os command injection

October 3, 2026 Yanac

A vulnerability classified as very critical was found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os command injection.

This vulnerability is registered as CVE-2026-105134. It is possible to launch the attack remotely. Furthermore, an exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More