Description
Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s /rps/api/json/UpdateReceivers.do endpoint. This vulnerability can be chained with CVE-2026-105133.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.0 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.1 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.10 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.11 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.12 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.13 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.14 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.15 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.16 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.17 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.18 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.19 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.2 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.20 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.21 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.22 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.23 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.24 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.25 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.26 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.27 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.28 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.29 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.3 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.30 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.31 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.32 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.33 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.34 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.35 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.36 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.37 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.38 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.39 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.4 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.40 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.41 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.42 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.43 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.44 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.45 | unaffected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.5 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.6 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.7 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.8 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 10.3.4.9 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.0 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.1 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.10 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.11 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.12 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.13 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.14 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.15 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.16 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.17 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.18 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.19 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.2 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.20 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.21 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.22 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.23 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.24 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.25 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.26 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.27 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.28 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.29 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.3 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.30 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.31 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.32 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.33 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.34 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.35 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.36 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.37 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.38 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.39 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.4 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.40 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.41 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.42 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.43 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.44 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.45 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.46 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.47 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.48 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.49 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.5 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.50 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.51 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.52 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.53 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.54 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.55 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.56 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.57 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.58 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.59 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.6 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.60 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.61 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.62 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.63 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.64 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.65 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.66 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.67 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.68 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.69 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.7 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.70 | unaffected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.8 | affected |
| AhsayCBS | Ahsay / AhsayCBS | 9.15.2.9 | affected |