As cited
Copy frozen at (site build).
vulnerabilities
AhsayCBS Deep-Dive: Auth Bypass to RCE
Huntress disclosed an in-the-wild exploitation campaign targeting AhsayCBS, an on-premises backup application. Attackers chained two vulnerabilities to bypass authentication and achieve remote code execution (RCE) by deploying webshells with SYSTEM and root privileges.
Why it matters: Organizations running AhsayCBS on-premises are exposed to active exploitation chains that grant attackers complete system compromise; patching is urgent.
- Source published
- First seen by Cybersecurity Tracker