{"apiVersion":"1","notice":"Security Threat Pulse API v1. Free, no key. Facts with sources; verdicts follow the published rules at https://securitythreatpulse.com/methodology. Not advice. Some source data is withheld here until its terms allow re-serving.","generatedAt":"2026-11-11T08:30:35.709Z","products":["ahsay"],"actNowTotal":1,"results":[{"query":"ahsay","matched":1,"actNow":1,"events":[{"id":"kev-2026-10-14-ahsay-ahsaycbs","url":"https://securitythreatpulse.com/events/kev-2026-10-14-ahsay-ahsaycbs","title":"AhsayCBS: 2 flaws used in attacks; attackers can get in without a password","verdict":"act_now","verdictReason":"Attacks are confirmed. The vulnerability is 38 days old, so many systems are likely still unpatched. Ready-made attack tools are public. The severity score is critical (10.0). The exploit prediction score is 84%.","tier":"now","rankScore":4,"rankWhy":["Exploitation is confirmed by an authoritative source.","Ready-made attack tools are public."],"rulesVersion":"v3","ladder":{"talk":"confirmed","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2026-105133","CVE-2026-105134"],"vendor":"Ahsay","product":"AhsayCBS","affectedProducts":[{"kind":"direct","slug":"ahsay/ahsaycbs","vendor":"Ahsay","product":"AhsayCBS","evidence":["kev","cpe"],"vendorKey":"ahsay","productKey":"ahsaycbs"}],"category":{"id":"server-backup","label":"Servers and backups","why":"It runs or protects many systems at once, including your backups.","doThis":"Patch it and keep its admin access off the internet."},"summary":"Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function. This vulnerability can be chained with CVE-2026-105134.","cvss":10,"epss":0.84478,"exploitMaturity":"weaponized","kevListed":true,"kevDateAdded":"2026-10-14","kevDueDate":"2026-10-17","firstSeenAt":"2026-10-14T00:00:00.000Z","updatedAt":"2026-11-11T05:30:21.131Z","newestEvidenceAt":"2026-11-11T07:30:04.036Z"}]}]}