AI analysis
Claude Opus · 5 Nov 2026, 10:22 CET
Ahsay AhsayCBS authentication bypass lets remote attackers evade login checks
An improper authentication flaw in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44 can be exploited remotely without credentials. It is confirmed exploited in the wild and in the CISA KEV catalog. Upgrade to 9.15.2.70 or 10.3.4.45.
In plain terms
AhsayCBS is backup server software used by managed service providers and businesses to run cloud and on-premises backups. This vulnerability lets an attacker bypass the login process (improper authentication) by manipulating a value sent to the server, without needing valid credentials, and the attack can be performed over the network.
Anyone running AhsayCBS, particularly service providers who host backups for multiple customers, should treat this as urgent. Backup systems hold sensitive data and are an attractive target, and this flaw is already being exploited in the wild. Note that the record states the initial patch did not fully fix the issue, so simply having applied an earlier update may not be sufficient.