Unpatched AhsayCBS Vulnerabilities Exploited in the Wild to Deploy Webshells and Cryptominers
Critical and medium-severity flaws remain unpatched, enabling active exploitation against backup management platforms

Key Takeaways
- Two unpatched vulnerabilities in AhsayCBS are being actively exploited in the wild.
- Exploitation leads to deployment of webshells for persistence and cryptocurrency miners for monetization.
- One vulnerability is rated critical severity; the other is medium severity.
- No patch is currently available; vulnerabilities remain unpatched.
Related Security News

AhsayCBS Vulnerabilities Exploited to Deploy XMRig Miners
Threat actors are exploiting two recently disclosed vulnerabilities in the AhsayCBS backup utility to gain unauthorized access, deploy web shells, and install XMRig cryptocurrency miners. The attacks involve flaws that permit improper authentication and other weaknesses to seize control of affected devices globally.




