Two vulnerabilities in AhsayCBS allow attackers to achieve SYSTEM-level remote code execution via a manipulated JSON flag. Active exploitation with cryptominers reported since October https://deafnews.it/en/article/ahsaycbs-under-attack-from-a-java-boolean-to-system-level-rce