horizon3ai/AhsayCBS-Auth-Bypass-RCE

PoC

A proof of concept exploit for CVE-2026-105133 and CVE-2026-105134 affecting AhsayCBS

view exploit source poc_in_githubauthor horizon3aipublished 2026-10-14catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-105133US	high7.3OT critical	5.79% (93rd)	KEV	2026-10-04
A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Perform…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.