Skip to content
Threat Feed
Subscribe

Vendor

Ahsay Systems

1 brief RSS
critical advisory

Unauthenticated Remote Code Execution in Ahsay AhsayCBS

Ahsay AhsayCBS up to version 10.3.2 is vulnerable to unauthenticated remote OS command injection via the /rps/api/json/UpdateReceivers.do endpoint, enabling full system compromise.

PoC AhsayCBS +2 vulnerability authentication-bypass remote-access
1r 3t 2c updated