Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge

What the source reports

Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices and deploy web shells and XMRig cryptocurrency miners. Details of the flaws are below - CVE-2026-105133 (CVSS v4 score: 5.5) - An improper authentication vulnerability in the checkSysPwd() function in the "com/ahsay/obs/api/ApiStructsAction.java"

This dispatch is based on reporting from The Hacker News. The original publication should be read for the complete context, named sources, dates, and qualifications.

Why it matters

The development is relevant to the way technology is built, secured, governed, or used. Readers should distinguish the reported facts from any interpretation added during editorial review.

The original source remains the authority for the underlying report.

OnBytr’s role is to provide a concise, source-linked explanation and identify the practical question worth watching next. This post is an editorial summary, not a substitute for the original reporting.