AhsayCBS (DIY) v9.17.0 Release Notes (12-Nov-2026)

Limitation / Known Issue of This Version

Deployment / Upgrade

  • For multi-domain SSL certificates added to CBS before v7.17.0.30, users are required to re-add the SSL certificates to CBS v7.17.0.30 or above, before the certificates can be used on sub-admins accounts.

Note

  • Besides the availability of re-branding option, the license key must have valid maintenance in order to build any v9 branded AhsayCBS/OBM/ACB installer.

This release contains the major features listed below:

Enhancements

Security

  • Disabled remote API access by default
  • Disabled the JSP engine to prevent execution of malicious JSP files
  • Ahsay Security Patchset for CVE-2026-105133 and CVE-2026-105134
  • Ahsay Security Patchset Q4/2026

Bug Fixes

API

  • GetBackupJobReport.do results in error "java.lang.NullPointerException"
  • Timezone discrepancy on ListBackupJobStatus, GetBackupJobReportSummary and GetBackupJobReport

General / Miscellaneous

  • Uploaded SSL certificate to AhsayCBS not recognized
  • File Viewer does not display the latest backup jobs
  • No "+" button on the cbs console backup set destination page when there is only 1 predefined destination on the Policy Group
  • Branding backup copies in local does not contain custom images
  • Changes to ""Run on Server"" backup set settings not saved when logged in as backup user on AhsayCBS console
  • Backupset deletion fails with "Parameter SysUser is null!" error when logged in as backup user
  • Getting [UnknownHostException] lic-us.ahsay.com after applying offline license
  • Client logs reuploading on the CBS after removing it from CBS side
  • Concurrent branded installer builds cause other subadmins to build QNAP installer only

Index

  • Data Migration not completed error during Data Integrity Check and Space freeing up

Application-specific Backup/Restore - CloudFile

  • Dropbox backup gets an error "Unable to retain old backup file" for moved file

Application-specific Backup/Restore - Microsoft 365

  • Backup warning "Site collection is not found" for a site showing on Backup Source but not visible on the actual Microsoft365 account
  • Backup continues to fail even after reauthenticating the account
  • Backup error due to wrong size of the backup file from the blocks folder ""File: “%bak_path%”, size: %value%, wrong size""
  • Backup gets error "Cannot get drive item of shareUrl: %URL% Reason=Permanent Redirect"
  • Backup gets error "delta file checksum incorrect"
  • Restore to local does not download file

Reporting

  • Restore report does not list restored files
  • Duplicate backup job entries in Daily User Report
  • Backup schedule turned off without being logged in User Change Log

Redirctor

  • Redirector gets error "Incorrect system username/password" when saving changes
  • RPS node cannot join Redirector Server, error "Failed to connect to RDR"

System Maintenance

  • HTTPS Port stopped responding
  • AhsayCBS runs for a few minutes then become inaccessible
  • AhsayCBS disconnected for 5-10 minutes and CPU and RAM usage reached 99%

Product Abbreviations:

  • AhsayACB - ACB
  • AhsayOBM - OBM
  • AhsayOBR - OBR
  • AhsayCBS - CBS
  • AhsayMobile - MOB
  • Mobile Backup Server (AhsayMobile) - MBS
AhsayCBS (DIY)