Auth bypass chained with Replication Receiver RCE gives SYSTEM. Huntress observed webshells and a disguised crypto miner. The first fix was incomplete: install hotfix 10.3.4.45 (v10) or 9.15.2.70 (v7-v9), reboot, then hunt for compromise. CISA added both CVEs to KEV on Oct 14 with a federal due date of Oct 17 (BOD 26-04 forensic triage required for CVE-2026-105134).