Attackers exploit AhsayCBS flaws to deploy Python backdoor

Researchers disclosed attacks exploiting two patched vulnerabilities in AhsayCBS backup software to deliver a Python-based backdoor. The chain of CVE-2026-105133 and CVE-2026-105134 bypasses authentication and executes arbitrary commands on affected systems. Attackers actively exploited the flaws in October 2026 before patches became available. Organizations should apply patches immediately.