一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月4日

CVE-2026-105133 [HIGH] – A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function che

未分类
📑 文章目录

A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Performing a manipulation of the argument random results in improper authentication. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading to version 10.3.4 is able to mitigate this issue. It is recommended to upgrade the affected component.