KEV Entry

CVE-2026-105134

Known Exploited Vulnerability Entry ENISA

Back to Catalog View Vulnerability
Entry Details
Confirmed Exploited

CVE-2026-105134

2026-10-23 02:00 CEST

Timestamps

2026-10-23

2026-10-23

Scope

Affected: Ahsay / AhsayCBS | Description: A flaw has been found in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. Upgrading to version 9.15.2.70 and 10.3.4.45 is able to resolve this issue. Upgrading the affected component is advised. The initial patch did not fix the security vulnerability properly. An update of the CVE entry to reflect this became necessary. | Patched since: 2026/10/12 | Exploitation type: unknown | CWEs: CWE-77 | Origin source: CNW | Notes: https://github.com/advisories/GHSA-MXJ3-2X8Q-2RH9

References
  • {'id': 'CVE-2026-105134', 'url': 'https://www.cve.org/CVERecord?id=CVE-2026-105134'}
  • {'id': 'EUVD-2026-92078', 'url': 'https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-92078'}
  • {'id': 'source', 'url': 'https://github.com/advisories/GHSA-MXJ3-2X8Q-2RH9'}

99e33233-320f-401f-bc2a-d1f759c437c2

ENISA
cce329bf-df49-4c6e-a027-80be2e6483bd

2026-10-27 06:37 CET

2026-10-27 06:37 CET

Evidence
1
Type Source Signal Confidence Details GCVE Metadata
csirt_report enisa-cnw-kev successful_exploitation 0.75
View details 
{
  "catalog": "ENISA / EU CSIRTs Network (CNW) KEV JSON",
  "cwes": [
    "CWE-77"
  ],
  "dateReported": "2026/10/23",
  "euvd": "EUVD-2026-92078",
  "exploitationType": [
    "unknown"
  ],
  "notes": "https://github.com/advisories/GHSA-MXJ3-2X8Q-2RH9",
  "originSource": "CNW",
  "patchedSince": "2026/10/12",
  "product": "AhsayCBS",
  "threatActorsExploiting": [],
  "vendorProject": "Ahsay",
  "vulnerabilityName": ""
}
 -
Export Options
JSON Object JSON API View Full Catalog