Skip to content
Threat Feed
Subscribe

Product

AhsayCBS (< 9.15.2.70)

1 brief RSS
critical advisory

Unauthenticated Remote Code Execution in Ahsay AhsayCBS

Ahsay AhsayCBS up to version 10.3.2 is vulnerable to unauthenticated remote OS command injection via the /rps/api/json/UpdateReceivers.do endpoint, enabling full system compromise.

exploited PoC AhsayCBS +4 vulnerability authentication-bypass remote-access
1r 3t 2c updated