CVE-2026-105134

Summary

A flaw in Ahsay AhsayCBS up to 10.3.2 allows for os command injection via manipulation of the 'random' argument, leading to potential remote code execution.

Exploitability

Exploitation is relatively straightforward given the remote attack vector and the presence of a known vulnerability.

Blast radius

If exploited, this vulnerability could result in complete compromise of the affected system, including unauthorized execution of commands and potential data exfiltration.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 10.3.4 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.