CVE-2026-105133 | Ahsay AhsayCBS up to 10.3.2 API ApiStructsAction.java checkSysPwd Random improper authentication

October 3, 2026 Yanac

A vulnerability classified as critical has been found in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Performing a manipulation of the argument random results in improper authentication.

This vulnerability is cataloged as CVE-2026-105133. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More