HighCVECVE-2026-105133
[CVE-2026-105133] Ahsay AhsayCBS — Ahsay AhsayCBS Improper Authentication Vulnerability
CISA KEV·Source published ·1 min read
What happened?
Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function. This vulnerability can be chained with CVE-2026-105134. Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes).
Key details
- Citrix NetScaler ADC and Gateway have a memory buffer vulnerability that could allow remote code execution or denial of service.
- Forensic triage is required per BOD 26-04 for affected systems.
- Organizations must apply vendor mitigations and follow BOD 26-04 patching guidelines.
- Running provided IOCs in the NetScaler console may help identify exploitation indicators.
Affected
- Citrix NetScaler ADC and NetScaler Gateway are affected.
What to look for
- IOCs provided by Citrix can be run in the NetScaler console to detect exploitation.
Summarised by SecOraLens from CISA KEV. Always read the original source before acting. How SecOraLens verifies advisories.