CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Ahsay AhsayCBS API Authentication Bypass Vulnerability (CVE-2026-105133) Security Advisory
[Affected Scope] All AhsayCBS installations running versions up to 9.15.2.69 and 10.3.4.44.
[Impact] Unauthenticated remote attackers can bypass the system password verification logic to gain full administrative access to the backup server.
[Mitigation] Immediately upgrade to version 9.15.2.70, 10.3.4.45, or later as per vendor instructions.
Microsoft Defender Remote Denial of Service (DoS) Vulnerability (CVE-2026-45498) Technical Advisory
[Affected Scope] All Windows and Windows Server systems utilizing the Microsoft Defender Antimalware Engine.
[Impact] Unauthenticated remote attackers can crash the real-time protection engine, disabling endpoint security defenses and leaving the system exposed to subsequent attacks.
[Mitigation] Immediately update the Microsoft Defender engine to the latest version (1.1.24000.0 or higher) and verify automatic update configurations.