Ahsay vulnerabilities
We track 3 vulnerabilities in Ahsay products across 2 products. 3 are rated high or critical, and 2 have been exploited in real attacks. The most recent was published on October 4, 2026.
Latest Ahsay vulnerabilities
- 10.0 Critical severity
Ahsay AhsayCBS Command Injection Exploited
A flaw has been found in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os comman
- 7.3 High severity
Ahsay AhsayCBS Improper Authentication Exploited
A vulnerability was detected in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Performing a manipulation of the argument random results in improper authe
- 7.2 High severity
Cloud Backup Suite: Improper Neutralization of Argument Delimiters in a Command
Ahsay AhsayCBS 9.1.4.0 allows an authenticated system user to inject arbitrary Java JVM options. Administrators that can modify the Runtime Options in the web interface can inject Java Runtime Options. These take effect after a restart. For example, an attacke