What is GHSA-fp2j-3cmp-828j?

GHSA-fp2j-3cmp-828j is a security advisory published by GitHub Security Advisories with Medium severity. A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function...

Which CVE IDs does GHSA-fp2j-3cmp-828j cover?

GHSA-fp2j-3cmp-828j covers the following CVE IDs: CVE-2026-105133. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-fp2j-3cmp-828j?

GHSA-fp2j-3cmp-828j has a CVSS v3 base score of 7.3, published by GitHub Security Advisories.

GHSA-fp2j-3cmp-828jMediumCVSS 7.3

A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function...

Vendor

GitHub Security Advisories

Published

October 4, 2026

Last Modified

October 4, 2026

🔗 CVE IDs covered (1)

CVE-2026-105133 →

📋 Description

A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Performing a manipulation of the argument random results in improper authentication. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading to version 10.3.4 is able to mitigate this issue. It is recommended to upgrade the affected component.

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2026-105133
https://vuldb.com/cve/CVE-2026-105133
https://vuldb.com/submit/942688
https://vuldb.com/vuln/413350
https://vuldb.com/vuln/413350/cti
https://www.ahsay.com/en/support/help-centre/release-notes/cbs/v10.3.4
https://github.com/advisories/GHSA-fp2j-3cmp-828j