We would like to inform you that our previous patches v9.15.2.59 and v10.3.4.0 did not fully address the following security vulnerabilities:
CVE-2026-105133
CVE-2026-105134
Given the severity of these risks, we strongly urge you to take immediate action to secure your environment and protect your customers data.
- Partners running affected v10 versions should apply the AhsayCBS v10.3.4.45 hotfix, available at: https://www.ahsay.com/en/hotfix-v10-partner-only (A valid partner portal login account is required)
- Partners running affected v7, v8, and v9 versions should apply the AhsayCBS v9.15.2.70 hotfix, available at: https://www.ahsay.com/en/hotfix-v9-partner-only (A valid partner portal login account is required)
After applying the hotfix, please reboot your server.
