October 11, 2026 weekly
- CVE-2026-105133 / CVE-2026-105134: AhsayCBS auth bypass + command injection, exploited since 7 Oct, 10.3.4 still vulnerable (Huntress). · Under Active Exploitation
in Two Hours From Write-Up to Exploit — and the "Fixed" Build Wasn't Fixed