KEV Entry

CVE-2026-105133

Known Exploited Vulnerability Entry ENISA

Back to Catalog View Vulnerability
Entry Details
Confirmed Exploited

CVE-2026-105133

2026-10-23 02:00 CEST

Timestamps

2026-10-23

2026-10-23

Scope

Affected: Ahsay / AhsayCBS | Description: A vulnerability was detected in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Performing a manipulation of the argument random results in improper authentication. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading to version 9.15.2.70 and 10.3.4.45 is able to mitigate this issue. It is recommended to upgrade the affected component. The initial patch did not fix the security vulnerability properly. An update of the CVE entry to reflect this became necessary. | Patched since: 2026/10/12 | Exploitation type: unknown | CWEs: CWE-287 | Origin source: CNW | Notes: https://github.com/advisories/GHSA-FP2J-3CMP-828J

References
  • {'id': 'CVE-2026-105133', 'url': 'https://www.cve.org/CVERecord?id=CVE-2026-105133'}
  • {'id': 'EUVD-2026-92079', 'url': 'https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-92079'}
  • {'id': 'source', 'url': 'https://github.com/advisories/GHSA-FP2J-3CMP-828J'}

d961ab93-3f9d-4a4f-8287-ec78bdcf63eb

ENISA
cce329bf-df49-4c6e-a027-80be2e6483bd

2026-10-27 06:37 CET

2026-10-27 06:37 CET

Evidence
1
Type Source Signal Confidence Details GCVE Metadata
csirt_report enisa-cnw-kev successful_exploitation 0.75
View details 
{
  "catalog": "ENISA / EU CSIRTs Network (CNW) KEV JSON",
  "cwes": [
    "CWE-287"
  ],
  "dateReported": "2026/10/23",
  "euvd": "EUVD-2026-92079",
  "exploitationType": [
    "unknown"
  ],
  "notes": "https://github.com/advisories/GHSA-FP2J-3CMP-828J",
  "originSource": "CNW",
  "patchedSince": "2026/10/12",
  "product": "AhsayCBS",
  "threatActorsExploiting": [],
  "vendorProject": "Ahsay",
  "vulnerabilityName": ""
}
 -
Export Options
JSON Object JSON API View Full Catalog