Skip to main content

Announcements

12 October

(Update) Critical Security Alert: Immediate Action Required for CVE-2026-105133 and CVE-2026-105134

We would like to inform you that our previous patches v9.15.2.59 and v10.3.4.0 did not fully address the following security vulnerabilities:

CVE-2026-105133
CVE-2026-105134

Given the severity of these risks, we strongly urge you to take immediate action to secure your environment and protect your customers data.


After applying the hotfix, please reboot your server.

10 October

Critical Security Alert: Immediate Action Required for CVE-2026-105133 and CVE-2026-105134

We would like to inform you that our previous patch v10.3.4.0 did not fully address the following security vulnerabilities:

CVE-2026-105133
CVE-2026-105134

Given the severity of these risks, we strongly urge you to take immediate action to secure your environment and protect your customers data.

Partners running affected v10 versions should apply the AhsayCBS v10.3.4.45 hotfix, available at: https://www.ahsay.com/en/hotfix-v10-partner-only (A valid partner portal login account is required)

After applying the hotfix, please reboot your server.

09 October

Clarification on AhsayCBS v10.3.4.0 vulnerabilities

We have recently received inquiries from various sources regarding the following two vulnerabilities, both of which were addressed in AhsayCBS v10.3.4.0, released on 4 August 2026: 

https://vuldb.com/cve/CVE-2026-105133
https://vuldb.com/cve/CVE-2026-105134

We would like to clarify that partners who have already upgraded to v10.3.4.0 are no longer affected by these vulnerabilities and are protected against remote exploitation by unauthenticated attackers.

However, if your backup server was compromised prior to upgrading to v10.3.4.0, the upgrade itself would not resolve any issues arising from the compromise. In such cases, we strongly recommend engaging qualified cybersecurity professionals to conduct a thorough investigation and perform any necessary remediation activities.

04 August

New Ahsay v10.3.4 Released

We are pleased to announce the official release of Ahsay v10.3.4 which now supports:

  1. Hyper-V backup on Windows 11
  2. Hyper-V backup on Windows 10
  3. macOS 26.6 (Tahoe)
  4. Debian 12.15 and Debian 13.6

Click here to view the full release notes.

20 July

New Ahsay v10.3.2 Released

We are pleased to announce the official release of Ahsay v10.3.2 which now supports:

  1. AhsayCBS Offline License
  2. Empower Synology/QNAP NAS to backup cloud files (e.g. Amazon S3, Dropbox), M365 and GWS data to NAS local storage
  3. Run-on-Server Restore (Cloud File/M365/GWS) to be run inside on-premises or cloud docker container for better server resources scaling
  4. Use AhsayCBS web interface to initiate restore jobs to be executed on AhsayOBM
  5. Migrate Exchange Web Services (EWS) to Microsoft Graph API in Exchange Online
  6. PostgreSQL 18.4
  7. Ubuntu 26.04

Click here to view the full release notes.