https://vulnfeed.org/Every disclosure, as it lands. Critical-only feed available.enhttps://vulnfeed.org/cve/CVE-2026-105134/https://vulnfeed.org/cve/CVE-2026-105134/Wed, 14 Oct 2026 00:00:00 +0000Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s /rps/api/json/UpdateReceivers.do endpoint. This vulnerability can be chained with CVE-2026-105133.https://vulnfeed.org/cve/CVE-2026-105133/https://vulnfeed.org/cve/CVE-2026-105133/Wed, 14 Oct 2026 00:00:00 +0000Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function. This vulnerability can be chained with CVE-2026-105134.